📦

no-mistakes

Name: no-mistakes
Author: kunchenguid

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス

Validate and Ship Code Changes Safely

Complex delivery pipelines can lose intent or mishandle repository state. This skill guides no-mistakes runs through review, testing, publication, and CI decisions.

対応: Claude Codex Code(CC)

⚠️ 50 不十分

Maintain this Skill? Claim it ⚠️ 50 不十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "no-mistakes" from https://skillstore.io/skills/kunchenguid-no-mistakes.md and its manifest at https://skillstore.io/api/skills/kunchenguid-no-mistakes/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/kunchenguid-no-mistakes.md 署名済み manifest GET /api/skills/kunchenguid-no-mistakes/manifest 署名済み lockfile GET /api/skills/kunchenguid-no-mistakes/lockfile

テストする

「no-mistakes」を使用しています。 Validate my committed feature and stop for product decisions.

期待される結果:

Validation reached review. One mechanical fix was applied. A product behavior finding needs your decision before the pipeline continues.

「no-mistakes」を使用しています。 Drive the approved pipeline until CI is ready.

期待される結果:

Review, tests, documentation, lint, push, and CI completed. The pull request is ready for human review and merge.

「no-mistakes」を使用しています。 Explain why the run did not publish.

期待される結果:

The run passed local checks but skipped publication because remote credentials were unavailable. No pull request was created.

セキュリティ監査

中リスク

v1 • 2026/9/27 バージョン別レポートを開く

All 153 static findings are false positives caused by Markdown formatting, documentation links, or unrelated prose. The skill still carries medium operational risk because it drives repository publication, accepts tool-supplied commands, and can resolve gates unattended with consent. No prompt injection or concealed malicious intent was found.

スキャンされたファイル

395

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (3)

中

SKILL.md:49-56 SKILL.md:139-200 SKILL.md:276-296

Repository and Remote Publication Automation

The skill directs an external pipeline that can commit, rebase, push, create pull requests, and monitor CI. These disclosed operations can materially change local and remote repository state.

The skill explicitly describes commit, rebase, push, pull request, and CI actions across these sections.

中

SKILL.md:109-113 SKILL.md:262-266

Execution of Tool-Supplied Commands

The skill tells the agent to act on exact commands returned by the external no-mistakes tool. Compromised or manipulated tool output could direct unintended command execution.

The instructions explicitly require acting on returned commands, although nearby text narrows expected recovery commands and reduces exploitability.

中

SKILL.md:322-331

Unattended Gate Resolution

With user consent, the --yes mode automatically fixes ask-user findings and approves resulting reviews. Broad consent can permit product behavior changes without per-finding confirmation.

The unattended behavior and its consent requirement are stated directly, including automatic handling of ask-user findings.

リスク要因

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/kunchenguid-no-mistakes/security.svg)](https://skillstore.io/skills/kunchenguid-no-mistakes?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/kunchenguid-no-mistakes?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/kunchenguid-no-mistakes/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/kunchenguid-no-mistakes.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

kunchenguid. (2026). no-mistakes security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1

BibTeX形式の引用

@techreport{kunchenguid-kunchenguid-no-mistakes-2026,
  author = {kunchenguid},
  title = {no-mistakes security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "no-mistakes security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "kunchenguid"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/kunchenguid-no-mistakes/audits/1"
identifiers:
  - type: other
    value: "skillstore:kunchenguid-no-mistakes:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Validate a Feature

Run committed feature work through review, tests, lint, documentation, and CI before requesting merge.

Prepare a Pull Request

Coordinate push and pull request stages while preserving explicit release constraints and reporting exceptions.

Recover Pipeline Custody

Interpret branch synchronization state and recover preserved pipeline commits without improvising destructive Git operations.

これらのプロンプトを試す

Validate Committed Work

Run no-mistakes on my committed feature branch. Use this intent: [goal]. Ask me about every ask-user finding.

Complete and Validate a Task

Complete [task], commit only relevant changes on a feature branch, then run no-mistakes with my full original intent.

Validate with Approved Skips

Validate this branch and skip [step] as authorized. Report every skip, override, pipeline fix, and final outcome.

Drive an Unattended Run

Run the full pipeline with --yes. Preserve unrelated work, honor protected-path refusals, and stop after checks pass.

ベストプラクティス

Provide the complete user goal, constraints, exclusions, and decisions as pipeline intent.
Inspect structured branch synchronization state before committing follow-up work or starting another run.
Report every automatic fix, skip, override, and missing validation signal.

回避

Do not start validation from the default branch or with uncommitted task changes.
Do not approve ask-user findings without direct consent or an explicit unattended request.
Do not reset, rebase, abort, or replace branches while the pipeline owns an active run.

よくある質問

What must be configured first?

Install no-mistakes, initialize the repository, run its daemon, and configure a supported pipeline agent.

Can it validate uncommitted changes?

No. The workflow validates committed history on a feature branch.

Can it push code and create pull requests?

Yes. The configured pipeline may push branches, create pull requests, and monitor CI.

How are product decisions handled?

Findings marked ask-user stop the run until the user chooses to fix, approve, or skip them.

What does --yes authorize?

It permits eligible findings to be fixed and approved without repeated questions. Protected paths still require operator action.

What happens after checks pass?

The skill reports the pull request as ready. A human reviews and merges it.

開発者情報

作成者

kunchenguid

ライセンス

MIT

Skillstore リビジョン

バージョンに関する注意

作者はバージョンを宣言していません。

リポジトリ

https://github.com/kunchenguid/no-mistakes/tree/f7fb206c26e407d0d04564c5b91c0ac1dc233689/skills/no-mistakes

参照

8b5ad1599e7c55e9b6c627bca3f556f6e9061cb1

メンテナンスの新しさ

2026/9/30

利用状況

0 ダウンロード · 0 閲覧

ファイル構成

📄 SKILL.md