📦

boyue

Name: boyue
Author: wuaishare

v0.2.3 Inhaltsrevision r1 Sicher 🌐 Netzwerkzugriff📁 Dateisystemzugriff⚙️ Externe Befehle

Govern AI-Assisted Software Decisions

AI coding can turn weak ideas into lasting complexity before teams evaluate value and risk. Boyue applies evidence-based boundaries to scope, ownership, delivery, and retirement decisions.

Unterstützt: Claude Codex Code(CC)

🥇 85 Gold

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "boyue" from https://skillstore.io/skills/wuaishare-boyue.md and its manifest at https://skillstore.io/api/skills/wuaishare-boyue/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/wuaishare-boyue.md Signiertes manifest GET /api/skills/wuaishare-boyue/manifest Signiertes lockfile GET /api/skills/wuaishare-boyue/lockfile

Testen

„boyue“ wird verwendet. Should we build a custom analytics export requested by one prospect?

Erwartetes Ergebnis:

Mode: Select. Recommendation: Defer. Demand is not established. Revisit when measured usage or repeated customer requests justify the ownership cost.

„boyue“ wird verwendet. Should an internal workflow become a public API in the first release?

Erwartetes Ergebnis:

Ownership decision: Reduce. Keep the workflow internal until external demand, compatibility needs, and support obligations are understood.

„boyue“ wird verwendet. How should we validate an AI invoice extraction prototype?

Erwartetes Ergebnis:

Test representative invoices, record field accuracy and failure modes, measure latency and cost, and compare a deterministic alternative before committing.

Sicherheitsaudit

Sicher

v1 • 7.9.2026 Versionsbericht öffnen

All 76 static findings are false positives caused by Markdown links, code-span formatting, manual installation examples, ordinary prose, or UTF-8 Chinese text. The skill contains governance guidance and templates, with no runtime code, automatic network activity, credential handling, prompt injection, or data-exfiltration intent.

Gescannte Dateien

4,199

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Risikofaktoren

🌐 Netzwerkzugriff (8)

CITATION.cff:9 CITATION.cff:10 CITATION.cff:23 paper/boyue-methodology.md:24 paper/boyue-methodology.md:60 README.md:198 README.zh-CN.md:252 references/methodology.md:11

📁 Dateisystemzugriff (47)

⚙️ Externe Befehle (4)

SKILL.md:23 SKILL.md:24 SKILL.md:131 SKILL.md:135

Das letzte abgeschlossene statische und semantische Audit erkannte keine bestätigten Sicherheitsbefunde. Dies beweist nicht, dass der Skill keine Nebenwirkungen hat.

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/wuaishare-boyue/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/wuaishare-boyue/security.svg)](https://skillstore.io/skills/wuaishare-boyue?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/wuaishare-boyue?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wuaishare-boyue/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/wuaishare-boyue.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

wuaishare. (2026). boyue security audit report (audit version 1) [Author version 0.2.3]. Skillstore. https://skillstore.io/skills/wuaishare-boyue/audits/1

BibTeX-Zitat

@techreport{wuaishare-wuaishare-boyue-2026,
  author = {wuaishare},
  title = {boyue security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/wuaishare-boyue/audits/1},
  note = {Author version 0.2.3}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "boyue security audit report (audit version 1)"
version: "0.2.3"
type: report
authors:
  - name: "wuaishare"
date-released: "2026-09-07"
url: "https://skillstore.io/skills/wuaishare-boyue/audits/1"
identifiers:
  - type: other
    value: "skillstore:wuaishare-boyue:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

100

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Evaluate a feature request

Separate interesting options from justified commitments, then record a Commit, Defer, or Discard decision.

Review an architecture change

Identify durable ownership surfaces, migration costs, simpler alternatives, and evidence needed before production adoption.

Reduce mature system complexity

Review low-value features, stale settings, dependencies, and services for maintenance, simplification, or retirement.

Diese Prompts ausprobieren

Classify a proposed change

Classify this change as Explore, Select, Shape, Deliver, or Evidence. Explain the lightest useful process and the next decision.

Apply the Commitment Boundary

Apply the Commitment Boundary to this feature request. State the problem, evidence, alternatives, non-goals, and recommend Commit, Defer, or Discard.

Review long-term ownership

Review this architecture proposal through the Ownership Boundary. Identify durable surfaces, maintenance obligations, simpler options, and recommend Own, Reduce, or Reject.

Design an AI evidence plan

Design an evidence plan for this uncertain AI capability. Define hypotheses, representative tests, failure criteria, costs, and a Minimum Coherent Value Slice.

Bewährte Praktiken

Use the fast path for small, reversible work that does not expand long-term ownership.
Record evidence, decision outcomes, and explicit revisit triggers for deferred work.
Test uncertain AI behavior with representative inputs before designing production architecture.

Vermeiden

Do not treat generated code or a successful prototype as proof of product value.
Do not add permanent APIs, settings, schemas, or services without reviewing ownership costs.
Do not impose arbitrary numeric gates when project evidence should determine the threshold.