📦

gaffa-support

Name: gaffa-support
Author: gaffaai

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos🔑 Variables de entorno

Troubleshoot Gaffa Skills and Prepare Support Reports

Gaffa skill failures can leave developers without a clear diagnosis or useful support evidence. This skill checks live documentation and prepares a local report for review.

Compatible con: Claude Codex Code(CC)

📊 69 Adecuado

Maintain this Skill? Claim it 📊 69 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "gaffa-support" from https://skillstore.io/skills/gaffaai-gaffa-support.md and its manifest at https://skillstore.io/api/skills/gaffaai-gaffa-support/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/gaffaai-gaffa-support.md Manifest firmado GET /api/skills/gaffaai-gaffa-support/manifest Lockfile firmado GET /api/skills/gaffaai-gaffa-support/lockfile

Pruébalo

Usando "gaffa-support". My extraction fails on a large page. Help without submitting another request.

Resultado esperado:

Likely cause: the extraction input may be too large.
Suggested next step: narrow the selected page region or set an input token cap.
No gaffa API request was submitted.

Usando "gaffa-support". The problem remains unresolved. Prepare a report using my diagnostic log and generated script.

Resultado esperado:

The report summarizes the problem, environment, prior troubleshooting, and two selected artifacts.
Credential fields were redacted, but script literals, URL tokens, and personal data still require review.
The timestamped Markdown report is saved in the working directory and shown for review.
After reviewing, email the file manually to support@gaffa.dev.

Auditoría de seguridad

Riesgo medio

v1 • 14/10/2026 Abrir el informe versionado

All 63 static alerts are false positives involving Markdown, API reference text, expected documentation access, or credential safeguards. One semantic finding covers incomplete redaction before reports are saved and displayed. No evidence found of malicious exfiltration or prompt injection; support reports require manual review and sending.

Archivos escaneados

147

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio

SKILL.md:61-66 SKILL.md:113-117

Incomplete Redaction Can Expose Report Secrets

The source warns that redaction can miss hard-coded keys, URL tokens, and personal data, then saves and displays the report. Known-key scrubbing also depends on an entropy floor, leaving some credential values unprotected outside recognized fields.

The file explicitly acknowledges missed secret formats and personal data before requiring persistence and inline display. Manual email prevents automatic exfiltration but does not prevent local or conversation exposure.

Factores de riesgo

⚙️ Comandos externos (47)

🌐 Acceso a red (5)

SKILL.md:27 SKILL.md:38 SKILL.md:40 SKILL.md:72 SKILL.md:76

📁 Acceso al sistema de archivos (4)

SKILL.md:64 SKILL.md:100 SKILL.md:64 SKILL.md:116

🔑 Variables de entorno (6)

SKILL.md:22 SKILL.md:54 SKILL.md:56 SKILL.md:57 SKILL.md:59 SKILL.md:61

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/gaffaai-gaffa-support/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/gaffaai-gaffa-support/security.svg)](https://skillstore.io/skills/gaffaai-gaffa-support?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/gaffaai-gaffa-support?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/gaffaai-gaffa-support/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/gaffaai-gaffa-support.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

gaffaai. (2026). gaffa-support security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/gaffaai-gaffa-support/audits/1

Cita BibTeX

@techreport{gaffaai-gaffaai-gaffa-support-2026,
  author = {gaffaai},
  title = {gaffa-support security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/gaffaai-gaffa-support/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gaffa-support security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "gaffaai"
date-released: "2026-10-14"
url: "https://skillstore.io/skills/gaffaai-gaffa-support/audits/1"
identifiers:
  - type: other
    value: "skillstore:gaffaai-gaffa-support:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Diagnose a Gaffa Skill Failure

Check current documentation against a failed skill workflow and receive a likely cause with a concrete next step.

Package Reproduction Evidence

Gather relevant scripts, reasoning logs, and request IDs into a reviewed report without submitting another browser request.

Prepare a Support Handoff

Summarize unresolved problems and prior troubleshooting in a local report that can be reviewed before contacting support.

Prueba estos prompts

Describe a Problem

Use gaffa-support to help with this problem: [what I tried and what failed]. Check the documentation and suggest one next step.

Check an Error

Use gaffa-support to compare [error message] with current documentation. Explain the likely cause without calling the gaffa API.

Prepare a Local Report

Prepare a gaffa support report for [problem]. List relevant logs, [script filename], and [request IDs]. Let me exclude artifacts before writing.

Review Sensitive Evidence

Prepare a gaffa report from [artifacts]. Review URL tokens, script literals, and personal data. Flag redaction uncertainty and keep sending manual.

Mejores prácticas

Provide a short problem statement, the skill involved, and relevant request IDs.
Exclude unrelated artifacts and review the report for secrets, URL tokens, and personal data before sending.
Delete reports after use or exclude them from version control.

Evitar

Treating best-effort redaction as a guarantee that every secret has been removed.
Expecting the skill to rerun browser requests or email reports automatically.
Assuming conversation details remain available after context compaction.

Preguntas frecuentes

Does this skill call the gaffa API?

No. It reads documentation and works with conversation context and local artifacts without submitting gaffa API requests.

Does troubleshooting spend gaffa credits?

The support workflow makes no gaffa API calls, so it does not spend gaffa credits.

Where is the report saved?

A timestamped gaffa-support Markdown report is saved in the current working directory and displayed for review.

Is the report sent automatically?

No. You review the report and email it manually to support@gaffa.dev.

Does redaction remove every secret?

No. Redaction can miss script literals, URL tokens, and personal data. Review the report before sharing it.

What happens if documentation is unavailable?

The skill reports the documentation failure and continues preparing a support report from available context and local artifacts.

Detalles del desarrollador

Autor

gaffaai

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/gaffaai/gaffa-for-ai/tree/0845e1324534d32032f946f53fc342b5e5212222/skills/gaffa-support

Ref.

01f3f4d6538d53a6ae331f737865d5ca93c90924

Actualidad del mantenimiento

15/10/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 agents/

📄 openai.yaml

📄 SKILL.md