スキル autopilot
📦
autopilot
コンテンツリビジョン r1 低リスク ⚙️ 外部コマンド🌐 ネットワークアクセス📁 ファイルシステムへのアクセス🔑 環境変数⚡ スクリプトを含む
Build Complete Software Projects on Autopilot
Complex builds often lose requirements between the brief, implementation, and review. Autopilot tracks each requirement through a structured, delegated delivery workflow.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "autopilot" from https://skillstore.io/skills/nick-vels-autopilot.md and its manifest at https://skillstore.io/api/skills/nick-vels-autopilot/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「autopilot」を使用しています。 Build a local appointment application for a small studio with services, available times, and contact details.
期待される結果:
- A reviewed local application covering booking, availability, validation, and empty states.
- A requirement manifest showing what was completed, deferred, or left as a placeholder.
- A final report with test results, assumptions, setup steps, and remaining configuration.
「autopilot」を使用しています。 Add CSV customer import to the existing product. Reject invalid rows and report partial failures.
期待される結果:
- A feature integrated with the existing stack and repository conventions.
- Tests covering valid imports, invalid rows, duplicates, and partial failures.
- Independent acceptance results traced back to the original brief.
「autopilot」を使用しています。 Interview me about a delivery marketplace, then build the approved scope.
期待される結果:
A structured interview resolves product forks before the skill writes the specification, delegates implementation, reviews each ticket, and reports acceptance.
セキュリティ監査
低リスクv1 • 2026/8/16 バージョン別レポートを開く
Most static findings are false positives from Markdown formatting, JavaScript template literals, secret-redaction guidance, CSS, and embedded PNG logos. One command risk is confirmed: shutdown trusts a PID from a writable file, and the loopback dashboard server briefly exposes all run artifacts to the local host.
16
スキャンされたファイル
3,373
解析済み行数
1
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (1)
低
Loopback Server Exposes Run Artifacts Locally
The preview path serves the entire .autopilot directory, including briefs, manifests, specifications, and tickets. Other same-host users or processes can read these artifacts while the server runs.
The instructions explicitly serve .autopilot and acknowledge that it contains run artifacts. Loopback binding prevents remote access but does not isolate data from the local host.
機能レビュー項目 (1)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
中
Shell command substitution
[ -f .autopilot/serve.pid ] && kill "$(cut -d' ' -f2 .autopilot/serve.pid)" 2>/dev/null; rm -f .auto
The shutdown command trusts a PID read from a writable project file and sends it a signal without verifying the process identity. A stale or modified serve.pid could terminate an unrelated local process.
リスク要因
⚙️ 外部コマンド (50)
phases/0-instruments.md:85 phases/0-memory.md:44-45 phases/0-memory.md:45-46 phases/0-memory.md:46-50 phases/0-memory.md:50 phases/0-memory.md:51 phases/0-memory.md:55-57 phases/0-preflight.md:38-44 phases/0-preflight.md:63-65 phases/0-preflight.md:65-66 phases/0-preflight.md:66-67 phases/0-preflight.md:67-68 phases/0-preflight.md:68-71 phases/1-manifest.md:65-75 phases/3-spec.md:147 phases/3-spec.md:153-167 phases/3-spec.md:167-178 phases/4-plan.md:122-148 phases/5-subagents.md:84 phases/5-subagents.md:85 phases/5-subagents.md:86 phases/5-subagents.md:92-96 phases/5-subagents.md:96-97 phases/5-subagents.md:97 phases/5-subagents.md:98 phases/5-subagents.md:102-103 phases/5-subagents.md:103-104 phases/5-subagents.md:115-121 phases/5-subagents.md:192-197 phases/8-final.md:125 phases/8-final.md:126-127 phases/8-final.md:127-128 phases/8-final.md:128 phases/8-final.md:139-141 phases/8-final.md:141-150 phases/8-final.md:150-152 phases/8-final.md:152-171 phases/8-final.md:171-172 phases/8-final.md:172-173 phases/8-final.md:173-174 phases/8-final.md:174-175 phases/8-final.md:175-176 phases/8-final.md:176-177 phases/8-final.md:198 phases/dashboard-template.html:286 phases/dashboard-template.html:287 phases/dashboard-template.html:288 phases/dashboard-template.html:289 phases/dashboard-template.html:290 phases/dashboard-template.html:292
🌐 ネットワークアクセス (4)
📁 ファイルシステムへのアクセス (6)
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/nick-vels-autopilot/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/nick-vels-autopilot?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/nick-vels-autopilot?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nick-vels-autopilot/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/nick-vels-autopilot.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
nick-vels. (2026). autopilot security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/nick-vels-autopilot/audits/1BibTeX形式の引用
@techreport{nick-vels-nick-vels-autopilot-2026,
author = {nick-vels},
title = {autopilot security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/nick-vels-autopilot/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "autopilot security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "nick-vels"
date-released: "2026-08-16"
url: "https://skillstore.io/skills/nick-vels-autopilot/audits/1"
identifiers:
- type: other
value: "skillstore:nick-vels-autopilot:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
83
仕様準拠
作成できるもの
Create a Founder Prototype
Turn a clear product idea into a tested local project without requiring the founder to review technical artifacts.
Deliver a Repository Feature
Map an existing feature brief to requirements, interfaces, implementation tickets, tests, and review.
Control an Autonomous Build
Use manual gates for specification and planning while keeping implementation, review, and acceptance delegated.
これらのプロンプトを試す
Build a Simple Project
Use Autopilot to build [project] for [audience]. It must support [core requirements]. Use the default workflow and keep the result local.
Add a Feature
Use Autopilot in semi mode to add [feature] to this repository. Preserve the existing stack and satisfy [acceptance criteria].
Develop the Brief Deeply
Use Autopilot in interview and deep modes for [product]. Challenge unclear assumptions, ask every important product question, then complete the build.
Run a Controlled High-Fidelity Build
Use Autopilot in manual, strict, and polish modes. Build only [requirements], obtain approval for the specification and tickets, then compare against [reference].
ベストプラクティス
- State the audience, core workflow, constraints, and success conditions in the initial brief.
- Use manual mode when specification or ticket approval is important to project governance.
- Review placeholders, assumptions, environment variable names, and deferred requirements in the final report.
回避
- Do not use Autopilot for a tiny single-file change that needs no specification or delegation.
- Do not place secret values in the brief, repository, prompts, dashboard state, or final report.
- Do not request deployment or other outward actions without an explicit confirmation step.
よくある質問
Does Autopilot ask questions?
Semi mode asks only about genuine product forks. Full mode self-briefs, while interview and manual modes ask more questions.
Can I approve the specification before coding starts?
Yes. Manual mode waits for explicit approval of both the specification and the implementation tickets.
Will it deploy or publish the result automatically?
No. Deployment, publishing, payment, external messaging, deletion, and history rewriting require explicit confirmation in every mode.
How does it track progress?
It writes local run state and displays stages, tickets, tests, timings, assumptions, and placeholders in a dashboard.
How are secrets handled?
The workflow records variable names only, redacts pasted values, and instructs the user to configure secrets in an ignored environment file.
What remains after the build?
The repository contains run records, project memory, local commits, test results, and architectural decisions when the project tier requires them.
開発者情報
作成者
nick-velsライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
リポジトリ
https://github.com/nick-vels/skills/tree/fac0e05a915cb56411facec663eb6dfa063d1571/skills/autopilot参照
fffe9a62369d0b42a0ecc587c533a81177ca4cd8
メンテナンスの新しさ
2026/8/16
利用状況
0 ダウンロード · 0 閲覧
ファイル構成