Fähigkeiten poteto-principles

📦

poteto-principles

Name: poteto-principles
Author: masseater

Inhaltsrevision r1 Sicher ⚙️ Externe Befehle🌐 Netzwerkzugriff

Apply Engineering Principles to Software Changes

Software changes can repeat avoidable design, debugging, and verification mistakes. This skill gives coding assistants explicit engineering principles for making simpler, better-supported decisions.

Unterstützt: Claude Codex Code(CC)

📊 75 Angemessen

Maintain this Skill? Claim it 📊 75 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "poteto-principles" from https://skillstore.io/skills/masseater-poteto-principles.md and its manifest at https://skillstore.io/api/skills/masseater-poteto-principles/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/masseater-poteto-principles.md Signiertes manifest GET /api/skills/masseater-poteto-principles/manifest Signiertes lockfile GET /api/skills/masseater-poteto-principles/lockfile

Testen

„poteto-principles“ wird verwendet. Two fixes changed retry timing, but the same workers still receive most of the load.

Erwartetes Ergebnis:

Shared assumption: retry timing causes the imbalance.
Next evidence: count work assignments per worker across repeated runs.
If the same workers dominate, inspect assignment rules before changing timing again.
Verify any correction with both per-worker distribution and end-to-end behavior.

„poteto-principles“ wird verwendet. Review a task model with a completion flag and an optional completion date.

Erwartetes Ergebnis:

The model permits a completed task without a completion date.
Represent open and completed tasks as distinct variants, with a required date for the completed variant.
Parse external records at the boundary and test both accepted and rejected states.

„poteto-principles“ wird verwendet. Our API refactor adds an adapter, but all callers are internal.

Erwartetes Ergebnis:

Confirm that no external users require compatibility.
Inventory internal callers and migrate them in verifiable units.
Remove the old API after caller migration and verify the new observable contract.
Use an adapter only when a specific transition requires it, with an explicit removal condition.

Sicherheitsaudit

Sicher

v1 • 24.10.2026 Versionsbericht öffnen

All 31 static findings are false positives involving Markdown backticks, software engineering prose, attribution metadata, or readable multilingual text. No evidence found of prompt injection, credential theft, unauthorized network execution, or concealed payloads in the reviewed files. Semantic findings and remediation are empty.

Gescannte Dateien

382

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Risikofaktoren

⚙️ Externe Befehle (25)

🌐 Netzwerkzugriff (1)

SKILL.md:5

Das letzte abgeschlossene statische und semantische Audit erkannte keine bestätigten Sicherheitsbefunde. Dies beweist nicht, dass der Skill keine Nebenwirkungen hat.

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/masseater-poteto-principles/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/masseater-poteto-principles/security.svg)](https://skillstore.io/skills/masseater-poteto-principles?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/masseater-poteto-principles?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/masseater-poteto-principles/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/masseater-poteto-principles.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

masseater. (2026). poteto-principles security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/masseater-poteto-principles/audits/1

BibTeX-Zitat

@techreport{masseater-masseater-poteto-principles-2026,
  author = {masseater},
  title = {poteto-principles security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/masseater-poteto-principles/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "poteto-principles security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "masseater"
date-released: "2026-10-24"
url: "https://skillstore.io/skills/masseater-poteto-principles/audits/1"
identifiers:
  - type: other
    value: "skillstore:masseater-poteto-principles:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Diagnose recurring failures

Use reproduction and evidence to identify a shared faulty assumption after repeated fixes fail.

Plan a coordinated API migration

Inventory internal callers, define verification boundaries, and remove the legacy path when compatibility requirements permit.

Review design and test quality

Assess domain models, validation boundaries, reader load, and whether tests assert observable behavior.

Diese Prompts ausprobieren

Beginner: Review a small change

Review [change] using poteto-principles. Identify unnecessary complexity, unclear state, and missing verification. Explain your recommendations without editing files.

Intermediate: Diagnose a recurring bug

Investigate [bug] and these failed fixes: [attempts]. Reproduce the failure, identify shared assumptions, and propose the smallest root-cause fix with a behavioral regression test.

Advanced: Plan an API migration

Plan migration from [old API] to [new API]. Inventory callers and compatibility requirements. Define reversible phases, verification boundaries, and conditions for removing the old API.

Expert: Review retry and concurrency safety

Review [workflow] for shared mutable state, retries, and partial failures. Propose isolation or serialization, reconciliation steps, and direct checks for repeated runs and interrupted execution.

Bewährte Praktiken

Provide the relevant code, observed behavior, constraints, and verification commands before requesting recommendations.
Define compatibility requirements and approval boundaries before planning migrations or autonomous edits.
Keep reproduction steps, direct checks, and measurement evidence with each proposed change.

Vermeiden

Applying every principle mechanically without checking project constraints or existing invariants.
Removing validation before confirming that every external input is parsed at the correct boundary.
Treating compilation, mock call counts, or agent reports as proof of correct user-visible behavior.

Häufig gestellte Fragen

What is poteto-principles?

It is a written collection of engineering principles for design, implementation, debugging, refactoring, migration, verification, and documentation work.

Can I use it with Claude, Codex, and Claude Code?

The marketplace metadata lists all three tools. Actual file access, editing, and verification depend on the capabilities and permissions of your environment.

Does the skill include scripts or an automated checker?

No. It contains Markdown guidance that recommends creating repeatable tools and checks when appropriate.

Is the guidance specific to TypeScript?

No. Most principles are language-independent. The type-system reference includes examples from several languages and points to a separate TypeScript skill.

Does it allow irreversible actions without approval?

No. Its autonomy guidance explicitly requires confirmation for force-pushing, deleting production data, and sending external messages.

Does it include the linked benchmark checklist?

No. The measurement guidance links to a separate benchmark checklist that is not bundled with this skill.