Habilidades decision-records

📦

decision-records

Name: decision-records
Author: skymavis

Revisión del contenido r1 Riesgo alto 📁 Acceso al sistema de archivos⚙️ Comandos externos🌐 Acceso a red

Manage Decision Records Consistently

Decision records become stale when identifiers, links, and lifecycle states drift. This skill manages drafts, promotions, indexes, validation, and cross-references.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "decision-records" from https://skillstore.io/skills/skymavis-decision-records.md and its manifest at https://skillstore.io/api/skills/skymavis-decision-records/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/skymavis-decision-records.md Manifest firmado GET /api/skills/skymavis-decision-records/manifest Lockfile firmado GET /api/skills/skymavis-decision-records/lockfile

Pruébalo

Usando "decision-records". Draft a decision to standardize PostgreSQL for transactional services.

Resultado esperado:

A draft decision with context, PostgreSQL as the proposed choice, evaluated alternatives, consequences, risks, and a four-letter draft identifier.

Usando "decision-records". Check the decision registry before merge.

Resultado esperado:

A concise validation result listing stale indexes, invalid metadata, broken references, or a successful check when no issues remain.

Usando "decision-records". Promote the approved authentication draft.

Resultado esperado:

A numbered accepted record, refreshed inbound links, an updated index, and a final validation result after explicit approval.

Auditoría de seguridad

Riesgo alto

v1 • 25/8/2026 Abrir el informe versionado

All 288 static alerts are false positives caused by Markdown backticks, draft mnemonics, relative links, placeholder URLs, or argument-array Git subprocesses. Manual review found a high-severity persistent agent-instruction pattern and a medium-severity installer overwrite risk.

Archivos escaneados

3,006

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (2)

Alto

templates/AGENTS.md:3-9 scripts/decisions.py:1356-1363

Prompt Injection Attempt Detected

The scaffold says "The skill is authoritative" and "when this file and the skill disagree, the skill wins." This persistent priority claim can override repository instructions and steer future agents toward installing or obeying the skill.

The template explicitly claims instruction precedence, and the installer writes a binding agent directive into a root AGENTS.md when none exists.

Medio

scripts/decisions.py:1322-1324

Installer Deletes an Existing Project Script

Installation unlinks an existing scripts/decisions.py before creating the skill symlink. This can destroy an unrelated tracked or untracked project script without backup or confirmation.

The code unconditionally calls unlink when the destination exists, including regular files, despite nearby documentation claiming installation never overwrites files.

Factores de riesgo

📁 Acceso al sistema de archivos (26)

⚙️ Comandos externos (50)

🌐 Acceso a red (3)

scripts/decisions.py:1217 tests/test_decisions.py:514 tests/test_decisions.py:524

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/skymavis-decision-records/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/skymavis-decision-records/security.svg)](https://skillstore.io/skills/skymavis-decision-records?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/skymavis-decision-records?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skymavis-decision-records/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/skymavis-decision-records.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

skymavis. (2026). decision-records security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skymavis-decision-records/audits/1

Cita BibTeX

@techreport{skymavis-skymavis-decision-records-2026,
  author = {skymavis},
  title = {decision-records security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/skymavis-decision-records/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "decision-records security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "skymavis"
date-released: "2026-08-25"
url: "https://skillstore.io/skills/skymavis-decision-records/audits/1"
identifiers:
  - type: other
    value: "skillstore:skymavis-decision-records:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Capture Architecture Decisions

Create structured drafts for technical choices, alternatives, consequences, and related records.

Maintain Governance Records

Track policy, legal, security, or operational decisions through accepted and retired states.

Validate Documentation in CI

Detect stale indexes, broken links, invalid metadata, duplicate identifiers, and lifecycle inconsistencies before merge.

Prueba estos prompts

Create a Decision Draft

Create a decision draft about [topic]. Include context, the proposed decision, rationale, alternatives, consequences, risks, and relevant record references.

Review a Draft

Review draft [ID] for complete front matter, clear rationale, realistic alternatives, consequences, unresolved risks, and valid decision references. Suggest focused edits.

Prepare an Approved Promotion

I approve promoting draft [ID]. Check dependencies and replacement effects, show the planned changes, then promote it and validate the decision registry.

Supersede a Decision Safely

Draft a replacement for decision [ID] using these changes: [changes]. Map affected references, explain consequences, and wait for approval before promotion.

Mejores prácticas

Keep each record focused on one decision with explicit context, alternatives, consequences, and deciders.
Reference records by identifier and regenerate links and the index after lifecycle changes.
Review promotion plans and obtain explicit approval before accepting or superseding records.

Evitar

Do not edit generated indexes or generated record links by hand.
Do not rewrite an accepted decision to change direction; create a superseding record.
Do not promote drafts with unresolved references, incomplete metadata, or missing human approval.