스킬 setup-template

📦

setup-template

Name: setup-template
Author: masseater

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수

Align TypeScript Repositories with Their Template

Template-derived repositories can retain missing GitHub settings and incomplete migration work even when builds pass. This skill guides repository setup and evidence-based comparisons against the template.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "setup-template" from https://skillstore.io/skills/masseater-setup-template.md and its manifest at https://skillstore.io/api/skills/masseater-setup-template/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/masseater-setup-template.md 서명된 manifest GET /api/skills/masseater-setup-template/manifest 서명된 lockfile GET /api/skills/masseater-setup-template/lockfile

테스트해 보기

"setup-template" 사용 중입니다. Illustrative assessment with a missing hook and an unsuccessful verification task.

예상 결과:

Migration status: incomplete.
Git hooks: incomplete. The configured hook directory does not match the expected template location.
Verification: incomplete. The verification task failed; include the actual task output as evidence.
Next steps: correct the hook configuration and investigate the failed task before repeating the assessment.

"setup-template" 사용 중입니다. Illustrative setup review where an existing ruleset requires tests before merging.

예상 결과:

Existing protection: tests must pass before merging.
Template difference: the proposed ruleset requires only the up-to-date check.
Decision needed: preserve the existing test requirement rather than replacing it with weaker protection.
No settings changed.

보안 감사

높은 위험

v1 • 2026. 10. 24. 버전별 보고서 열기

Most static alerts are false positives from Markdown, Japanese text, or expected GitHub operations; installation and verification execute repository-controlled code. Check mode also applies remote configuration despite the stated inspection-only boundary. The prescribed ruleset replacement can remove stronger protections, while the template criteria place verification after merging rather than before.

스캔된 파일

244

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (2)

높음

usecases/setup.md:47-58 usecases/setup.md:65-74 references/typescript-template.md:79-83

Template Alignment Can Weaken Pre-Merge Protections

Setup replaces a same-named ruleset with deletion, force-push, and up-to-date protections only. The reference requires verification after main pushes and treats PR verification as obsolete, potentially removing stronger checks and allowing unverified changes onto main.

The replacement payload lists only freshness as a required status check, and the reference explicitly excludes PR verification. Existing stronger protections are not preserved.

중간

SKILL.md:17 usecases/check.md:9 usecases/setup.md:9-42

Inspection Mode Applies Remote Configuration Changes

SKILL.md says inspection must not repair issues, but check step 5 directs the agent to apply the setup procedure. That procedure registers secrets and changes Actions permissions, merge settings, and branch rulesets, creating remote side effects during a requested assessment.

The check procedure explicitly directs configuration alignment, contradicting the stated inspection-only boundary. The referenced setup commands perform authenticated remote writes.

기능 검토 항목 (1)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

중간

SKILL.md:43

Ruby/shell backtick execution

- `vp install` と `vp run verify` を実行する。verify が落ちたら、落ちたタスクとその出力を最初の欠けとして扱う

Although the backticks are Markdown, the prose explicitly directs execution of vp install and vp run verify. Repository-controlled scripts can run with agent privileges without a preceding trust review.

위험 요인

⚙️ 외부 명령어 (8)

SKILL.md:8 SKILL.md:10 SKILL.md:30 SKILL.md:43 SKILL.md:51 SKILL.md:52 usecases/setup.md:57 usecases/setup.md:58

🌐 네트워크 접근 (1)

SKILL.md:8

📁 파일 시스템 접근 (1)

usecases/check.md:7

🔑 환경 변수 (2)

usecases/setup.md:14 usecases/setup.md:22

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/masseater-setup-template/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/masseater-setup-template/security.svg)](https://skillstore.io/skills/masseater-setup-template?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/masseater-setup-template?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/masseater-setup-template/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/masseater-setup-template.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

masseater. (2026). setup-template security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/masseater-setup-template/audits/1

BibTeX 인용

@techreport{masseater-masseater-setup-template-2026,
  author = {masseater},
  title = {setup-template security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/masseater-setup-template/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "setup-template security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "masseater"
date-released: "2026-10-24"
url: "https://skillstore.io/skills/masseater-setup-template/audits/1"
identifiers:
  - type: other
    value: "skillstore:masseater-setup-template:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Initialize a Template-Derived Repository

Configure repository automation, deployment identifiers, secret names, and branch settings after creating a repository from the template.

Assess an AI-Assisted Migration

Compare the migrated repository with template elements and collect evidence for missing hooks, ineffective checks, and leftover configuration.

Review Automation Configuration

Compare GitHub settings and CI behavior with template expectations while identifying differences that require explicit policy decisions.

이 프롬프트를 사용해 보세요

Review Setup Requirements

List the setup steps for this template-derived repository. Identify required tools, permissions, and secret names without changing files or GitHub settings.

Configure an Approved Repository

Prepare setup for [owner/repository]. Show proposed changes and existing protections first. Request approval before writes and use interactive secret entry.

Assess Migration Completeness

Assess this migration against the template. Override setup-in-check behavior: report differences without repairs. Request approval before installation or verification, then provide evidence.

Compare Template and Security Policy

Compare [owner/repository] with the template and our policy: [requirements]. Identify weaker rules, missing verification, and unsupported exceptions. Propose changes without applying them.

모범 사례

Confirm the target repository and review existing permissions and rulesets before approving setup changes.
Enter credentials through secure interactive prompts, and review repository scripts before running installation or verification.
Preserve stronger organizational protections and retain command evidence for every migration judgment.

피하기

Treating the default check workflow as read-only despite its setup step.
Replacing stronger branch protections solely to match the template.
Declaring migration complete because builds pass without checking hooks, automation, and obsolete configuration.

자주 묻는 질문

Which repositories does this skill target?

It targets repositories derived from masseater/typescript-template. Other repositories require confirmation of applicable steps before work begins.

What tools and permissions are needed?

GitHub CLI authentication and sufficient repository permissions are needed for setup. Local checks also use Vite+ and project-specific tooling.

Does check mode change anything?

Yes. It runs installation and verification and directs GitHub setup. Explicitly prohibit remote writes when requesting an assessment only.

How should I provide secrets?

Use GitHub CLI interactive prompts or approved secret management. Avoid placing secret values in chat, reports, or committed files.

Does template alignment guarantee secure branch protection?

No. The prescribed model relies on freshness checks before merging and verification afterward. Preserve stronger requirements from your organizational policy.

Are newer template features automatically migration defects?

No. The skill separates later template additions from missing migration elements and requires reasons for elements that do not apply.

개발자 세부 정보

작성자

masseater

라이선스

MIT

Skillstore 리비전

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/masseater/skills/tree/4810c8f1186a229ca57d2f278c0a94f0fc862fec/skills/setup-template

참조

965badf91ae3b8f9a49183f5a56d91de6efc51ad

유지보수 최신성

2026. 10. 24.

사용량

0 다운로드 · 0 조회

파일 구조

📁 references/

📄 typescript-template.md

📄 SKILL.md

📁 usecases/

📄 check.md

📄 setup.md

masseater의 다른 스킬

전체 보기

📦

skill-authoring

Create and Revise Agent Skills

AI-written skills can introduce assumptions that users never approved. This skill guides creation and revision from user decisions, explicit goals, and organized rules.

문서화 보기

📦

integrate

Integrate Libraries With Enforced Migration

New libraries often coexist with legacy implementations, leaving inconsistent usage across a codebase. This skill guides migration, standardizes usage, and requires automated constraints against legacy patterns.

코딩 및 개발 보기

📦

humanity-and-humanness

Improve AI Communication With Human Readers

AI responses can miss how people read, express preferences, and interpret context. This skill guides clearer structure, concrete drafts, and feedback that preserves user decisions.

커뮤니케이션 보기

📦

dont-it-yourself

Reuse Existing Libraries Before Writing Custom Code

Custom helpers can duplicate existing functionality and increase maintenance work. This skill guides library discovery and direct reuse before implementing only the missing behavior.

코딩 및 개발 보기

📦

writing

Write Clear Documentation and Natural Fiction

Unclear structure and repetitive phrasing make useful writing difficult to follow. This skill guides revisions around reader needs, explicit reasons, meaningful punctuation, and varied pacing.

글쓰기 및 콘텐츠 보기

📦

poteto-principles

Apply Engineering Principles to Software Changes

Software changes can repeat avoidable design, debugging, and verification mistakes. This skill gives coding assistants explicit engineering principles for making simpler, better-supported decisions.

코딩 및 개발 보기

전체 보기

📦

senior-devops

DevOps 파이프라인 및 배포 자동화

작성자 alirezarezvani

DevOps 작업에는 반복 가능한 파이프라인, 인프라, 배포 패턴이 필요한 경우가 많습니다. 이 스킬은 CI/CD, IaC, 배포, 운영 검토를 위한 스크립트와 참조 가이드를 제공합니다.

DevOps 및 인프라 보기

📦

cloud-devops

클라우드 DevOps 워크플로 조정

작성자 sickn33

클라우드 제공 작업은 여러 도구와 단계에 걸쳐 진행되는 경우가 많습니다. 이 스킬은 인프라, CI/CD, Kubernetes, 모니터링, 보안, 비용, 복구 작업을 명확한 프롬프트로 정리합니다.

DevOps 및 인프라 보기

📦

playwright-testing

Playwright 테스트 커버리지 개선

작성자 C0ntr0lledCha0s

구성, 로케이터, 픽스처가 일관되지 않으면 Playwright 스위트가 불안정해질 수 있습니다. 이 스킬은 신뢰할 수 있는 브라우저 테스트, 디버깅, 재사용 가능한 페이지 객체를 위한 실용적인 패턴을 제공합니다.

코딩 및 개발 보기

📦

testing

신뢰할 수 있는 테스트 자동화 구축

작성자 89jobrien

취약한 테스트는 릴리스를 늦추고 회귀를 숨깁니다. 이 스킬은 테스트 전략, TDD, 자동화, 커버리지 검토, Playwright 웹 검사를 안내합니다.

코딩 및 개발 보기

📦

nestjs-code-audit

Audit NestJS Code with Evidence-Backed Findings

작성자 amirtaherkhani

NestJS repositories can hide boundary flaws and runtime risks that lint results alone cannot reveal. This skill combines local evidence collection and semantic review into one prioritized report.

코딩 및 개발 보기

📦

starknet-js

starknet.js로 Starknet 앱 구축하기

작성자 internet-court

Starknet 통합에는 정밀한 provider, account, transaction 및 fee 처리가 필요합니다. 이 skill은 Claude, Codex 및 Claude Code에 실용적인 starknet.js v9 패턴을 제공합니다.

코딩 및 개발 보기

setup-template

내 에이전트로 설치

에이전트가 읽기 쉬운 리소스

테스트해 보기

보안 감사

확인된 보안 우려 사항 (2)

위험 요인

보고서 링크 복사

Markdown 배지

HTML 배지

임베드 카드

APA 인용

BibTeX 인용

CITATION.cff

Skillstore 점수

만들 수 있는 것

Initialize a Template-Derived Repository

Assess an AI-Assisted Migration

Review Automation Configuration

이 프롬프트를 사용해 보세요

모범 사례

피하기

자주 묻는 질문

개발자 세부 정보

masseater의 다른 스킬

skill-authoring

integrate

humanity-and-humanness

dont-it-yourself

writing

poteto-principles

관련 스킬

senior-devops

cloud-devops

playwright-testing

testing

nestjs-code-audit

starknet-js