Skills ai-gates

📦

ai-gates

Name: ai-gates
Author: zhaobolun-code

Content revision r1 Safe ⚙️ External commands

Navigate ai-gates Project Workflows

ai-gates documentation can be difficult to apply when project files, plugin files, and hooks have separate roles. This skill explains the workflow boundaries so users can start work, upgrade safely, and avoid duplicate setup.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Maintain this Skill? Claim it 🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "ai-gates" from https://skillstore.io/skills/zhaobolun-code-ai-gates.md and its manifest at https://skillstore.io/api/skills/zhaobolun-code-ai-gates/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/zhaobolun-code-ai-gates.md Signed manifest GET /api/skills/zhaobolun-code-ai-gates/manifest Signed lockfile GET /api/skills/zhaobolun-code-ai-gates/lockfile

Test it

Using "ai-gates". I installed ai-gates. What happens when I first open my project?

Expected outcome:

The plugin session start can copy .ai-gates into the workspace when it is missing.
A runtime file identifies the project owner.
The user starts project work through the PM entry.

Using "ai-gates". How should I begin a new task?

Expected outcome:

Enter the PM workflow, then describe the task in plain language. The project PM entry routes the work into the appropriate delivery lane.

Using "ai-gates". Will a project library upgrade update the Cursor plugin cache?

Expected outcome:

No. The project library upgrade changes the project copy. The Cursor plugin cache remains separate and is not updated by that action.

Security Audit

Safe

v1 • 9/17/2026 Open versioned report

All eight static findings are false positives. The analyzer matched Markdown inline and fenced backticks in SKILL.md, rather than executable Ruby or shell commands. No prompt injection or net-new semantic security issue was found.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (8)

SKILL.md:11 SKILL.md:15 SKILL.md:19-22 SKILL.md:22-24 SKILL.md:24 SKILL.md:28 SKILL.md:33-34 SKILL.md:34

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: claude

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/zhaobolun-code-ai-gates/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/zhaobolun-code-ai-gates/security.svg)](https://skillstore.io/skills/zhaobolun-code-ai-gates?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/zhaobolun-code-ai-gates?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhaobolun-code-ai-gates/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/zhaobolun-code-ai-gates.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

zhaobolun-code. (2026). ai-gates security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhaobolun-code-ai-gates/audits/1

BibTeX citation

@techreport{zhaobolun-code-zhaobolun-code-ai-gates-2026,
  author = {zhaobolun-code},
  title = {ai-gates security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/zhaobolun-code-ai-gates/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "ai-gates security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "zhaobolun-code"
date-released: "2026-09-17"
url: "https://skillstore.io/skills/zhaobolun-code-ai-gates/audits/1"
identifiers:
  - type: other
    value: "skillstore:zhaobolun-code-ai-gates:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Start a Seeded Project

Understand what the plugin copied, where job skills live, and how to enter the workflow after opening a project.

Standardize Team Entry

Use a clear PM entry point for planning, development, and code review work across project contributors.

Resolve Upgrade and Hook Confusion

Separate project library upgrades from plugin cache updates and diagnose overlapping hook registration.

Try These Prompts

Explain the Workflow

Explain what ai-gates is, where its project job skills live, and what I should do when I first open a seeded project.

Enter the PM Workflow

Use the PM entry to help me define this task, identify the right lane, and describe the next project workflow step.

Diagnose Hook Overlap

Explain why plugin hooks and project hooks may both be registered, which one exits early, and which one performs the real work.

Plan a Safe Upgrade

Create an upgrade checklist that updates the project ai-gates library without changing the plugin cache or duplicating job skill trees.

Best Practices

Keep job skills in the seeded project tree and treat the plugin skills folder as meta-only.
Use the PM entry point to begin work so the project workflow can select the correct lane.
Upgrade the project library separately from the plugin cache and verify hook ownership after changes.

Avoid

Treating the plugin cache as the true skill source after project seeding.
Pulling ai-gates-collect as if it were a skill upgrade.
Duplicating job SKILL.md trees inside the plugin skills folder.

Frequently Asked Questions

What is ai-gates?

It is a Cursor-oriented AI development pipeline with a PM entry and four delivery lanes. This marketplace skill explains how the meta-skill fits into that setup.

Where do the planner and developer skills live?

They live in the seeded project, under .cursor/skills and then .ai-gates/skills.

How do I start ordinary project work?

Use the PM entry and describe the task. The project workflow then routes the work to the appropriate lane.

What happens on the first open of a project?

The plugin session start can copy .ai-gates into the workspace when missing and write runtime metadata that identifies the project owner.

Why are two hook sets registered?

The plugin and project may both add hooks. The plugin gate can allow and exit when project hook files exist, leaving the project hooks to do the real work.

Does a project library upgrade change the plugin cache?

No. The documented project upgrade uses GitHub tags for the project library and does not update the Cursor plugin cache.

Developer Details

Author

zhaobolun-code

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/zhaobolun-code/ai-gates/tree/4d3e84b41403bba7e03148927324e7213a699629/.ai-gates/cursor-marketplace/skills/ai-gates

Ref

9be34bdd3e1cb2f1280ccd11fa00419204fc4d81

Maintenance freshness

9/18/2026

Usage

0 downloads · 0 views

File structure

📄 SKILL.md