Compétences executor-discovery

📦

executor-discovery

Name: executor-discovery
Author: atri10

Révision du contenu r1 Sûr ⚙️ Commandes externes🌐 Accès réseau📁 Accès au système de fichiers

Clarify Initiatives and Compare Approaches

Unclear requirements and unsupported assumptions make technical decisions difficult. This skill guides structured discovery, evidence gathering, and approach comparisons before human approval.

Prend en charge: Claude Codex Code(CC)

🥉 77 Bronze

Maintain this Skill? Claim it 🥉 77 Bronze

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "executor-discovery" from https://skillstore.io/skills/atri10-executor-discovery.md and its manifest at https://skillstore.io/api/skills/atri10-executor-discovery/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/atri10-executor-discovery.md manifest signé GET /api/skills/atri10-executor-discovery/manifest lockfile signé GET /api/skills/atri10-executor-discovery/lockfile

Tester

Utilisation de « executor-discovery ». Compare approaches for an approved tenant-placement initiative with an unresolved scalability claim.

Résultat attendu:

Research separates cited scalability claims from measurements and lists the missing benchmark.
Two approaches are compared on effort, operational risk, migration cost, and reversibility.
The recommendation states the tenant threshold that would change it and awaits the human choice.

Utilisation de « executor-discovery ». A request includes billing changes and an independently shipped reporting service.

Résultat attendu:

Scope review identifies independent deliverables and recommends separate initiatives with a declared dependency.
Initiative creation is handed to the intake workflow instead of scaffolding folders during discovery.
Detailed discovery continues on the first initiative after the split is agreed.

Utilisation de « executor-discovery ». Compare dashboard layouts after the user accepts the visual companion.

Résultat attendu:

The visual session shows synthetic examples and records layout selections.
Terminal feedback remains the primary decision input.
The final layout choice is recorded in the options document before advancing.

Audit de sécurité

Sûr

v1 • 05/10/2026 Ouvrir le rapport versionné

Of 130 static findings, 129 concern Markdown syntax, fixed relative references, or legitimate workflow operations. One confirmed risk concerns binding the visual server to all interfaces, exposing token-protected HTTP beyond localhost. No evidence found of prompt injection or deliberate exfiltration; referenced scripts are absent from the reviewed files, so their implementations remain unverified.

Fichiers analysés

875

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Éléments d’évaluation des capacités (1)

Il s’agit de capacités locales réelles qui peuvent être attendues pour cette compétence ; elles nécessitent donc un examen, mais ne sont pas comptabilisées comme comportement malveillant confirmé.

Moyen

visual-companion.md:179

Hardcoded IP address

--host 0.0.0.0 \

Binding to 0.0.0.0 exposes the visual server on every IPv4 interface. The documented HTTP URL lacks transport encryption; token authentication mitigates but does not eliminate exposure.

Facteurs de risque

⚙️ Commandes externes (50)

🌐 Accès réseau (3)

SKILL.md:184 visual-companion.md:93 visual-companion.md:179

📁 Accès au système de fichiers (31)

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/atri10-executor-discovery/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/atri10-executor-discovery/security.svg)](https://skillstore.io/skills/atri10-executor-discovery?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/atri10-executor-discovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/atri10-executor-discovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/atri10-executor-discovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

atri10. (2026). executor-discovery security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/atri10-executor-discovery/audits/1

Citation BibTeX

@techreport{atri10-atri10-executor-discovery-2026,
  author = {atri10},
  title = {executor-discovery security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/atri10-executor-discovery/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "executor-discovery security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "atri10"
date-released: "2026-10-05"
url: "https://skillstore.io/skills/atri10-executor-discovery/audits/1"
identifiers:
  - type: other
    value: "skillstore:atri10-executor-discovery:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Resolve an Unclear Feature Request

Clarify an approved feature initiative, define exclusions, and compare realistic approaches before requesting stakeholder approval.

Evaluate a Technical Approach

Gather evidence for a migration or performance decision and compare alternatives with explicit uncertainty and reversal costs.

Compare Interface Concepts

Use consent-based visual mockups with synthetic content to compare layouts and connect feedback to the discovery decision.

Essayez ces prompts

Clarify an Initiative

Review the approved charter for [initiative]. Summarize repository facts, then ask one question about unresolved purpose, constraints, or success criteria.

Check Scope Boundaries

Assess [initiative] for independent deliverables. Explain whether it needs separate initiatives or multiple specifications, and ask one question about any unresolved boundary.

Build an Evidence-Based Comparison

For [initiative], document unsupported claims with evidence labels. Compare two or three approaches using identical axes, reversal costs, and recommendation-changing conditions.

Review a Visual Decision Record

For [initiative], check consent before proposing visual comparisons. Use synthetic data, preserve terminal feedback as primary, and reconcile the session decision with the options document.

Bonnes pratiques

Read the approved charter and repository evidence before asking questions.
Label every claim honestly and state what evidence would change the recommendation.
Use synthetic mockup data, keep credentials outside tracked artifacts, and prefer loopback connections for visual sessions.

Éviter

Starting implementation before the human approves an approach.
Calling cited claims measured or omitting evidence gaps.
Putting real customer data or credentials in tracked visual artifacts.

Foire aux questions

When should I use this skill?

Use it after charter approval when scope, requirements, or the right approach remains unclear.

Does this skill write production code?

No. It produces discovery records and comparisons; measurement probes must be documented as throwaway evidence.

What documents does discovery produce?

It produces RSCH research documents when evidence is needed and OPTS options documents for decisions with alternatives.

Who chooses the final approach?

The human chooses. The skill records that choice and updates the discovery phase before handing off to architecture.

Are browser mockups required?

No. The visual companion is optional, offered for genuinely visual questions, and requires explicit consent.

Can the visual companion run remotely?

The guide shows non-loopback binding, which increases exposure. Prefer authenticated forwarding and encrypted connections; never display real customer data or credentials.