📦

engineering-loop

Name: engineering-loop
Author: phelan164

مراجعة المحتوى r1 آمن ⚙️ الأوامر الخارجية

Complete Repository Changes with Verified Evidence

Repository changes can fail when implementation, testing, and review are disconnected. This skill manages a complete local engineering loop with explicit evidence and stop conditions.

يدعم: Claude Codex Code(CC)

📊 75 كافٍ

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل

Review the Skillstore skill "engineering-loop" from https://skillstore.io/skills/phelan164-engineering-loop.md and its manifest at https://skillstore.io/api/skills/phelan164-engineering-loop/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/phelan164-engineering-loop.md manifest موقَّع GET /api/skills/phelan164-engineering-loop/manifest lockfile موقَّع GET /api/skills/phelan164-engineering-loop/lockfile

اختبرها

جارٍ استخدام "engineering-loop". Fix the duplicate invoice submission defect and add regression coverage.

النتيجة المتوقعة:

Fixed duplicate submission handling in the owning request path.
Added a regression test covering repeated invoice requests.
Focused tests and the required broader checks passed.
Reviewed the final diff; no unresolved consequential findings remain.

جارٍ استخدام "engineering-loop". Add account export with authorization checks and report any blockers.

النتيجة المتوقعة:

Implemented authorized account export with explicit ownership validation.
Added success, forbidden, and malformed-request coverage.
Focused validation passed, but the full integration suite requires unavailable infrastructure.
The remaining blocker and exact required service were documented.

جارٍ استخدام "engineering-loop". Investigate an intermittent cache invalidation failure.

النتيجة المتوقعة:

Created a bounded reproducer and recorded the distinguishing failure signature.
Tested ranked timing and key-normalization hypotheses independently.
Isolated the cause, added regression coverage, and removed temporary instrumentation.
The original reproduction and affected repository checks passed.

التدقيق الأمني

آمن

v1 • ٣١‏/٧‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

The two static findings are false positives caused by prose and inline Markdown formatting. The skill defines a bounded local engineering workflow without executable shell logic, prompt injection, or data-exfiltration intent.

الملفات التي تم فحصها

212

الأسطر التي تم تحليلها

عناصر المراجعة

تم تجاهل الإيجابيات الكاذبة

عوامل الخطر

⚙️ الأوامر الخارجية (1)

SKILL.md:13

لم يكتشف أحدث تدقيق ثابت ودلالي مكتمل أي نتائج أمنية مؤكدة. ولا يثبت ذلك أن المهارة خالية من الآثار الجانبية.

دقّقه: codex

شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار

نسخ رابط التقرير

https://skillstore.io/skills/phelan164-engineering-loop/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/phelan164-engineering-loop/security.svg)](https://skillstore.io/skills/phelan164-engineering-loop?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/phelan164-engineering-loop?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/phelan164-engineering-loop/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/phelan164-engineering-loop.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

phelan164. (2026). engineering-loop security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/phelan164-engineering-loop/audits/1

اقتباس BibTeX

@techreport{phelan164-phelan164-engineering-loop-2026,
  author = {phelan164},
  title = {engineering-loop security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/phelan164-engineering-loop/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "engineering-loop security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "phelan164"
date-released: "2026-07-31"
url: "https://skillstore.io/skills/phelan164-engineering-loop/audits/1"
identifiers:
  - type: other
    value: "skillstore:phelan164-engineering-loop:audit:1"
    description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: متوسط

الهندسة المعمارية

قابلية الصيانة

المحتوى

المجتمع

الامتثال للمواصفات

ما الذي يمكنك بناؤه

Implement a Focused Feature

Complete a repository feature from baseline inspection through tests, diff review, and final evidence.

Resolve a Reproducible Defect

Reproduce a defect, add regression coverage, implement a bounded fix, and verify affected behavior.

Coordinate a Cross-Stack Change

Track acceptance criteria, validation levels, contract effects, and blockers across several repository layers.

جرّب هذه الموجّهات

Fix a Small Defect

Use the engineering loop to reproduce and fix [defect]. Preserve unrelated changes, run focused tests, review the diff, and report evidence.

Build a Feature

Implement [feature] with these acceptance criteria: [criteria]. Establish the baseline, add appropriate tests, run required checks, and summarize residual risks.

Investigate an Intermittent Failure

Investigate [failure] using a bounded reproducer and ranked hypotheses. Isolate the cause, add regression coverage, implement the smallest fix, and reverify.

Execute a High-Risk Cross-Stack Change

Complete [change] across [layers]. Track contracts, migrations, authorization boundaries, data integrity, validation levels, review findings, and explicit stop conditions.

أفضل الممارسات

Define observable acceptance criteria and a safe baseline before changing code.
Run the narrowest relevant check after each bounded change, then complete required broader validation.
Preserve unrelated work and report unrun checks, residual risks, and blockers explicitly.

تجنب

Do not weaken assertions, remove coverage, or hide errors to make validation pass.
Do not repeat identical failing commands without classifying the failure and revisiting assumptions.
Do not deploy, migrate, merge, publish, or query production without explicit authorization.