スキル executor-discovery

📦

executor-discovery

Name: executor-discovery
Author: atri10

コンテンツリビジョン r1 安全 ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス

Clarify Initiatives and Compare Approaches

Unclear requirements and unsupported assumptions make technical decisions difficult. This skill guides structured discovery, evidence gathering, and approach comparisons before human approval.

対応: Claude Codex Code(CC)

🥉 77 ブロンズ

Maintain this Skill? Claim it 🥉 77 ブロンズ

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "executor-discovery" from https://skillstore.io/skills/atri10-executor-discovery.md and its manifest at https://skillstore.io/api/skills/atri10-executor-discovery/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/atri10-executor-discovery.md 署名済み manifest GET /api/skills/atri10-executor-discovery/manifest 署名済み lockfile GET /api/skills/atri10-executor-discovery/lockfile

テストする

「executor-discovery」を使用しています。 Compare approaches for an approved tenant-placement initiative with an unresolved scalability claim.

期待される結果:

Research separates cited scalability claims from measurements and lists the missing benchmark.
Two approaches are compared on effort, operational risk, migration cost, and reversibility.
The recommendation states the tenant threshold that would change it and awaits the human choice.

「executor-discovery」を使用しています。 A request includes billing changes and an independently shipped reporting service.

期待される結果:

Scope review identifies independent deliverables and recommends separate initiatives with a declared dependency.
Initiative creation is handed to the intake workflow instead of scaffolding folders during discovery.
Detailed discovery continues on the first initiative after the split is agreed.

「executor-discovery」を使用しています。 Compare dashboard layouts after the user accepts the visual companion.

期待される結果:

The visual session shows synthetic examples and records layout selections.
Terminal feedback remains the primary decision input.
The final layout choice is recorded in the options document before advancing.

セキュリティ監査

安全

v1 • 2026/10/5 バージョン別レポートを開く

Of 130 static findings, 129 concern Markdown syntax, fixed relative references, or legitimate workflow operations. One confirmed risk concerns binding the visual server to all interfaces, exposing token-protected HTTP beyond localhost. No evidence found of prompt injection or deliberate exfiltration; referenced scripts are absent from the reviewed files, so their implementations remain unverified.

スキャンされたファイル

875

解析済み行数

レビュー項目

誤検知を無視

機能レビュー項目 (1)

これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。

中

visual-companion.md:179

Hardcoded IP address

--host 0.0.0.0 \

Binding to 0.0.0.0 exposes the visual server on every IPv4 interface. The documented HTTP URL lacks transport encryption; token authentication mitigates but does not eliminate exposure.

リスク要因

⚙️ 外部コマンド (50)

🌐 ネットワークアクセス (3)

SKILL.md:184 visual-companion.md:93 visual-companion.md:179

📁 ファイルシステムへのアクセス (31)

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/atri10-executor-discovery/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/atri10-executor-discovery/security.svg)](https://skillstore.io/skills/atri10-executor-discovery?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/atri10-executor-discovery?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/atri10-executor-discovery/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/atri10-executor-discovery.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

atri10. (2026). executor-discovery security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/atri10-executor-discovery/audits/1

BibTeX形式の引用

@techreport{atri10-atri10-executor-discovery-2026,
  author = {atri10},
  title = {executor-discovery security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/atri10-executor-discovery/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "executor-discovery security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "atri10"
date-released: "2026-10-05"
url: "https://skillstore.io/skills/atri10-executor-discovery/audits/1"
identifiers:
  - type: other
    value: "skillstore:atri10-executor-discovery:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Resolve an Unclear Feature Request

Clarify an approved feature initiative, define exclusions, and compare realistic approaches before requesting stakeholder approval.

Evaluate a Technical Approach

Gather evidence for a migration or performance decision and compare alternatives with explicit uncertainty and reversal costs.

Compare Interface Concepts

Use consent-based visual mockups with synthetic content to compare layouts and connect feedback to the discovery decision.

これらのプロンプトを試す

Clarify an Initiative

Review the approved charter for [initiative]. Summarize repository facts, then ask one question about unresolved purpose, constraints, or success criteria.

Check Scope Boundaries

Assess [initiative] for independent deliverables. Explain whether it needs separate initiatives or multiple specifications, and ask one question about any unresolved boundary.

Build an Evidence-Based Comparison

For [initiative], document unsupported claims with evidence labels. Compare two or three approaches using identical axes, reversal costs, and recommendation-changing conditions.

Review a Visual Decision Record

For [initiative], check consent before proposing visual comparisons. Use synthetic data, preserve terminal feedback as primary, and reconcile the session decision with the options document.

ベストプラクティス

Read the approved charter and repository evidence before asking questions.
Label every claim honestly and state what evidence would change the recommendation.
Use synthetic mockup data, keep credentials outside tracked artifacts, and prefer loopback connections for visual sessions.

回避

Starting implementation before the human approves an approach.
Calling cited claims measured or omitting evidence gaps.
Putting real customer data or credentials in tracked visual artifacts.

よくある質問

When should I use this skill?

Use it after charter approval when scope, requirements, or the right approach remains unclear.

Does this skill write production code?

No. It produces discovery records and comparisons; measurement probes must be documented as throwaway evidence.

What documents does discovery produce?

It produces RSCH research documents when evidence is needed and OPTS options documents for decisions with alternatives.

Who chooses the final approach?

The human chooses. The skill records that choice and updates the discovery phase before handing off to architecture.

Are browser mockups required?

No. The visual companion is optional, offered for genuinely visual questions, and requires explicit consent.

Can the visual companion run remotely?

The guide shows non-loopback binding, which increases exposure. Prefer authenticated forwarding and encrypted connections; never display real customer data or credentials.