Compétences executor-verification
📩

executor-verification

RĂ©vision du contenu r1 Risque moyen ⚙ Commandes externes📁 AccĂšs au systĂšme de fichiers

Verify Completion Claims With Recorded Evidence

Completion claims can hide failed, skipped, or untested requirements. This skill guides requirement-level verification with observed output, commit-bound evidence, and explicit human acceptance.

Prend en charge: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 69 AdĂ©quat

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent
Review the Skillstore skill "executor-verification" from https://skillstore.io/skills/atri10-executor-verification.md and its manifest at https://skillstore.io/api/skills/atri10-executor-verification/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/atri10-executor-verification.md manifest signé GET /api/skills/atri10-executor-verification/manifest lockfile signé GET /api/skills/atri10-executor-verification/lockfile

Tester

Utilisation de « executor-verification ». Verify an integration criterion that requires HTTP 409 with no partial write.

RĂ©sultat attendu:

  • Illustrative outcome: FAILED.
  • Observed: the integration test received HTTP 500 instead of HTTP 409.
  • Required: HTTP 409 with no partial write.
  • Next step: return the mismatch to execution and reverify after the fix.

Utilisation de « executor-verification ». Summarize a verification round where one manual criterion was never checked.

RĂ©sultat attendu:

  • Illustrative summary: 11 PROVEN, 0 FAILED, 1 NOT-RUN, 0 UNAVAILABLE.
  • Exception: the manual criterion has no recorded observation.
  • Completion remains unproven. Present the exception for human acceptance or further verification.

Utilisation de « executor-verification ». Run a criterion when the evidence runner lacks a required credential.

RĂ©sultat attendu:

  • Illustrative runner outcome: NOT-RUN.
  • Evidence: none; no run and no evidence file.
  • Reason: the criterion requires a credential that was not provided.
  • Do not inspect the environment for secrets or assume the criterion passes.

Audit de sécurité

Risque moyen
v1 ‱ 05/10/2026 Ouvrir le rapport versionnĂ©

All 155 static findings are false positives involving Markdown formatting, intended local verification, companion paths, or protective secret-handling guidance. Two semantic workflow risks concern unisolated regression reverts and retained evidence after secret-scan failures. No evidence found of malicious prompt injection or exfiltration; companion helper implementations are outside the two reviewed files.

2
Fichiers analysés
819
Lignes analysées
0
ÉlĂ©ments Ă  examiner
0
Faux positifs ignorés

Préoccupations de sécurité confirmées (2)

Moyen
SKILL.md:173-183
Regression Verification Reverts Fixes Without Isolation
The regression workflow says "Revert the fix" and "Restore the fix" without an isolated worktree or recovery checkpoint. Following it in a shared worktree can discard edits or disrupt concurrent work.
The ordered steps explicitly require reverting and restoring code, but provide no isolation or preservation procedure. No destructive command is specified, so damage depends on implementation.
Moyen
evidence-runner-prompt.md:183-187SKILL.md:305-311
Secret Recovery Does Not Address Retained Evidence Copies
After a secret finding, the runner says "redact and rewrite" through the evidence helper. The storage policy creates new attempt files instead of overwriting, so sensitive originals may remain in tracked evidence.
Recovery requests another write while the documented helper preserves earlier attempts. No cleanup or quarantine of detected sensitive originals is specified; the helper implementation is outside this audit.

Facteurs de risque

⚙ Commandes externes (50)
evidence-runner-prompt.md:63-70 evidence-runner-prompt.md:87-90 evidence-runner-prompt.md:90-109 evidence-runner-prompt.md:109-132 evidence-runner-prompt.md:132-134 evidence-runner-prompt.md:134-164 evidence-runner-prompt.md:164 evidence-runner-prompt.md:166-168 evidence-runner-prompt.md:168-185 evidence-runner-prompt.md:185-187 evidence-runner-prompt.md:187-190 evidence-runner-prompt.md:190-191 evidence-runner-prompt.md:191-198 evidence-runner-prompt.md:198 evidence-runner-prompt.md:201 evidence-runner-prompt.md:202-212 evidence-runner-prompt.md:212-225 evidence-runner-prompt.md:225-231 SKILL.md:13 SKILL.md:15 SKILL.md:19-21 SKILL.md:21-30 SKILL.md:30-32 SKILL.md:32-47 SKILL.md:47-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68 SKILL.md:73-74 SKILL.md:74-78 SKILL.md:78-82 SKILL.md:82-87 SKILL.md:87-96 SKILL.md:96-107 SKILL.md:107-117 SKILL.md:117-128 SKILL.md:128-129 SKILL.md:129-130 SKILL.md:130-131 SKILL.md:131 SKILL.md:139-141 SKILL.md:141-143 SKILL.md:143-145 SKILL.md:145-171 SKILL.md:171-183 SKILL.md:183-206 SKILL.md:206-218 SKILL.md:218-222
📁 Accùs au systùme de fichiers (8)
evidence-runner-prompt.md:71 evidence-runner-prompt.md:185 SKILL.md:13 SKILL.md:15 SKILL.md:307 SKILL.md:479 SKILL.md:481 SKILL.md:485
Audité par: codex
Partager et citer ce rapport

Partagez le rapport d’évaluation versionnĂ©, le badge neutre, la carte intĂ©grable et les citations. Skillstore prĂ©sente les preuves sans dĂ©cider si ce Skill est sĂ»r.

Ouvrir le rapport versionné
Évaluation de sĂ©curitĂ©

Copier le lien du rapport

https://skillstore.io/skills/atri10-executor-verification/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/atri10-executor-verification/security.svg)](https://skillstore.io/skills/atri10-executor-verification?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/atri10-executor-verification?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/atri10-executor-verification/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/atri10-executor-verification.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citations académiques (APA · BibTeX · CFF)

Citation APA

atri10. (2026). executor-verification security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/atri10-executor-verification/audits/1

Citation BibTeX

@techreport{atri10-atri10-executor-verification-2026, author = {atri10}, title = {executor-verification security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/atri10-executor-verification/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "executor-verification security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "atri10" date-released: "2026-10-05" url: "https://skillstore.io/skills/atri10-executor-verification/audits/1" identifiers: - type: other value: "skillstore:atri10-executor-verification:audit:1" description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen
55
Architecture
85
Maintenabilité
87
Contenu
65
Communauté
87
Conformité aux spécifications

Ce que vous pouvez créer

Verify a Feature Before Handoff

Walk existing acceptance criteria, gather suitable evidence, and present unresolved requirements before a feature handoff.

Review Requirement Coverage

Compare observed test and smoke outcomes with requirements, without treating a passing unit suite as full feature proof.

Coordinate Agent Verification

Dispatch one evidence runner per criterion, inspect the returned artifact, and route failures back to the owning implementation plan.

Essayez ces prompts

Check One Requirement 
Verify criterion [reference] in [verification document] at the current state. Report its requirement, named method, observed output, and status without changing code.
Build an Outcomes Round 
Walk every criterion in [verification document]. Record state, commands, outcomes, and evidence citations. Summarize all four statuses and stop for human acceptance.
Dispatch an Evidence Runner 
Prepare one runner for [criterion] using the provided template. Fill every placeholder, select a model explicitly, and verify prerequisites before dispatch.
Reverify After a Shared-Code Fix 
Review fix [commit] against the existing ledger. Identify affected criteria and append a new round. Use isolated regression checks and scan retained evidence before committing.

Bonnes pratiques

  • Record the exact tested state and match each requirement to the evidence type its strategy names.
  • Use an isolated worktree for regression reverts and preserve all existing user changes.
  • Redact before capture, scan every retained evidence attempt, and resolve sensitive originals before tracking or committing.

Éviter

  • Treating passing unit tests, clean review reports, or expected output as proof of every requirement.
  • Changing code during verification to obtain a passing result without a separate fix and new evidence round.
  • Hiding FAILED, NOT-RUN, or UNAVAILABLE outcomes when presenting the completion summary.

Foire aux questions

What does this skill verify?
It guides checks against existing verification criteria and records observed outcomes. It does not invent acceptance criteria or guarantee software correctness.
Can I use it with Claude, Codex, or Claude Code?
The report lists all three tools. The workflow still requires command execution, repository access, and the referenced Executor dependencies.
Are the helper scripts included?
No. The reviewed skill contains instructions and an evidence runner template. Companion Executor helpers are referenced separately and were not audited here.
What happens when a check cannot run?
Record NOT-RUN or UNAVAILABLE with the exact blocker. Missing evidence is not a pass, and residual gaps require explicit human acceptance.
Does verification fix failing code?
No. Failures return to execution. After fixes land, append a new round and reverify every criterion the change could affect.
What precautions apply to stored evidence?
Redact sensitive output before writing and scan retained files. A redacted replacement does not guarantee earlier sensitive attempts were removed.

Détails du développeur

Auteur

atri10

Licence

MIT

RĂ©vision Skillstore

r1

Avis de version

L’auteur n’a dĂ©clarĂ© aucune version.

DĂ©pĂŽt

https://github.com/atri10/executor/tree/39ddcfe1d9f3497102622b72aa235fb0770187fe/skills/executor-verification

RĂ©f

6d0b11444384184b7ae743742a7e233a9a705cd9

RĂ©cence de maintenance

06/10/2026

Utilisation

0 téléchargements · 1 vues

Structure de fichiers

📄 evidence-runner-prompt.md

📄 SKILL.md