Compétences executor-initiative

📦

executor-initiative

Name: executor-initiative
Author: atri10

Révision du contenu r1 Risque élevé ⚙️ Commandes externes📁 Accès au système de fichiers

Manage Initiative Intake and Lifecycle

Unclear scope and missing approval records make project decisions difficult to track. This skill guides request classification, charter writing, and lifecycle documentation through Executor.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "executor-initiative" from https://skillstore.io/skills/atri10-executor-initiative.md and its manifest at https://skillstore.io/api/skills/atri10-executor-initiative/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/atri10-executor-initiative.md manifest signé GET /api/skills/atri10-executor-initiative/manifest lockfile signé GET /api/skills/atri10-executor-initiative/lockfile

Tester

Utilisation de « executor-initiative ». Can the admin dashboard share the existing server process?

Résultat attendu:

Classification: Spike.
Deliverable: A feasibility recommendation, not retained implementation code.
Next step: Present the proposed investigation and wait for approval.
Initiative allocation: Not required.

Utilisation de « executor-initiative ». Tenant bulk imports repeatedly degrade other tenants. Prepare a charter for an isolation initiative.

Résultat attendu:

Classification: Architectural initiative.
Problem: One tenant can degrade service for other tenants.
Proposed criterion: Tenant API p99 remains below an agreed threshold during the bulk import fixture.
Non-goal: Cross-region failover.
Approval status: Pending confirmation of the problem statement and measurable criteria.

Utilisation de « executor-initiative ». Add multi-region failover to an initiative approved only for tenant isolation.

Résultat attendu:

Recommendation: Create a separate initiative.
Reason: Recovery-time requirements add success criteria beyond the approved isolation scope.
Relationship: Document a dependency only if the new work genuinely depends on the existing initiative.
Existing charter: Preserve its approved scope.

Audit de sécurité

Risque élevé

v1 • 05/10/2026 Ouvrir le rapport versionné

All 168 static alerts are false positives for their reported patterns: Markdown delimiters, sibling references, a registry lock, and routine workflow operations. Two semantic risks remain: documented unlocked transitions can lose updates, and the verification checklist can record intake approval before charter presentation. No evidence found of malware, exfiltration, or audit-directed prompt injection; referenced dependency scripts were unavailable for review.

Fichiers analysés

706

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (2)

Élevé

SKILL.md:511-520 SKILL.md:233-258 SKILL.md:339-357

Verification Checklist Can Record Unapproved Intake

The checklist says to run checks when presenting the charter, including a state-changing intake-pass command. This can record approval before the required human decision.

The checklist directly requests a pass during presentation, while the intake gate requires prior approval. Documented artifact checks do not establish human authorization.

Moyen

SKILL.md:109-120 SKILL.md:329-337 SKILL.md:390-392

Concurrent Transitions Can Lose Lifecycle Records

The skill states that phase and status updates lack locking and can lose updates in shared indexes. Prose serialization rules do not coordinate independent agents.

The source explicitly documents unlocked writes and lost updates. The dependency implementation was unavailable, so this finding concerns the documented workflow risk.

Facteurs de risque

⚙️ Commandes externes (50)

📁 Accès au système de fichiers (11)

SKILL.md:8 SKILL.md:13 SKILL.md:91 SKILL.md:167 SKILL.md:230 SKILL.md:253 SKILL.md:308 SKILL.md:440 SKILL.md:516 SKILL.md:519 SKILL.md:113

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/atri10-executor-initiative/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/atri10-executor-initiative/security.svg)](https://skillstore.io/skills/atri10-executor-initiative?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/atri10-executor-initiative?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/atri10-executor-initiative/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/atri10-executor-initiative.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

atri10. (2026). executor-initiative security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/atri10-executor-initiative/audits/1

Citation BibTeX

@techreport{atri10-atri10-executor-initiative-2026,
  author = {atri10},
  title = {executor-initiative security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/atri10-executor-initiative/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "executor-initiative security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "atri10"
date-released: "2026-10-05"
url: "https://skillstore.io/skills/atri10-executor-initiative/audits/1"
identifiers:
  - type: other
    value: "skillstore:atri10-executor-initiative:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Classify an Incoming Engineering Request

Determine whether a request needs a feasibility answer, a bounded change, or a documented architectural initiative.

Prepare a Charter for Approval

Translate an architectural request into measurable outcomes, explicit scope boundaries, and named approval responsibilities.

Maintain Initiative Lifecycle Records

Document approved transitions, pauses, replacements, and closure while keeping the registry and initiative index consistent.

Essayez ces prompts

Classify a Request

Classify this request: [request]. Explain whether it is a spike, bounded change, or architectural initiative. Do not change files.

Draft an Initiative Charter

Draft a charter for [initiative] with measurable criteria, non-goals, allowed paths, and [approver]. Present it for approval without recording a gate pass.

Evaluate Existing Initiative Scope

Compare [request] with the approved charter for [initiative ID]. Recommend attachment or separate allocation without widening approved scope or changing records.

Apply an Approved Lifecycle Transition

After confirming [approval evidence], record [transition] for [initiative ID]. Serialize updates, document skipped phases, verify both indexes, and preserve prior records.

Bonnes pratiques

Confirm dependency availability and inspect referenced scripts before authorizing execution.
Obtain explicit approval before recording any gate pass; treat pre-presentation verification as read-only.
Serialize lifecycle updates, verify both indexes, and redact secret values from tracked documents.

Éviter

Create initiatives for questions or bounded changes without a lasting architectural deliverable.
Widen an approved charter or mark a gate passed without a new human decision.
Run concurrent phase updates, delete historical records, or copy example identifiers and timestamps.

Foire aux questions

Which AI tools can use this skill?

The report lists Claude, Codex, and Claude Code. Full operation also requires repository access and the referenced Executor dependencies.

Does every request need an initiative?

No. Feasibility spikes and most bounded changes do not. Architectural work receives an initiative or attaches to an existing approved scope.

Can this skill implement the project?

No. It coordinates intake and lifecycle records. Other Executor skills handle specifications, planning, execution, verification, and handoff.

Are the required scripts included?

No. The reviewed package contains instructions and examples. It references scripts and contract documents in a sibling Executor skill.

Does a successful command prove human approval?

No. Explicit human approval is required. The pre-presentation verification checklist should not run a state-changing intake-pass command.

Can multiple agents update phases simultaneously?

Not safely under the documented workflow. Phase and status changes lack locking, so serialize transitions and verify the resulting indexes.

Détails du développeur

Auteur

atri10

Licence

MIT

Révision Skillstore

Avis de version

L’auteur n’a déclaré aucune version.

Dépôt

https://github.com/atri10/executor/tree/39ddcfe1d9f3497102622b72aa235fb0770187fe/skills/executor-initiative

Réf

6d0b11444384184b7ae743742a7e233a9a705cd9

Récence de maintenance

06/10/2026

Utilisation

0 téléchargements · 0 vues

Structure de fichiers

📁 references/

📄 intake-examples.md

📄 SKILL.md