스킬 skill-doctor

📦

skill-doctor

Name: skill-doctor
Author: warpdotdev

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어📁 파일 시스템 접근🔑 환경 변수🌐 네트워크 접근⚡ 스크립트 포함

Grade and Improve Your Agent Skills

Agent skills are difficult to evaluate from configuration alone. This skill reviews local conversations, scores outcomes, and drafts evidence-based improvements.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "skill-doctor" from https://skillstore.io/skills/warpdotdev-skill-doctor.md and its manifest at https://skillstore.io/api/skills/warpdotdev-skill-doctor/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/warpdotdev-skill-doctor.md 서명된 manifest GET /api/skills/warpdotdev-skill-doctor/manifest 서명된 lockfile GET /api/skills/warpdotdev-skill-doctor/lockfile

테스트해 보기

"skill-doctor" 사용 중입니다. Grade conversations in this repository from the last 30 days.

예상 결과:

Overall grade: B. The report highlights repeated verification delays, weak skill coverage, and one recurring code-quality defect.

"skill-doctor" 사용 중입니다. Evaluate project skills only and draft justified improvements.

예상 결과:

Three project skills were detected.
One description change is proposed from two failed sessions.
No installed skill files were modified.

"skill-doctor" 사용 중입니다. Review all supported local conversation sources.

예상 결과:

A combined local report summarizes sampled sessions, skill usage, scorer results, proposed edits, and a shareable image.

보안 감사

높은 위험

v1 • 2026. 8. 28. 버전별 보고서 열기

Most static matches are false positives from Markdown formatting, test fixtures, CSS, or fixed-argument git subprocesses. Confirmed capabilities include reading Claude and Codex history directories and Warp conversation databases. Semantic review found prompt-injection and scope-enforcement gaps, unredacted transcript copies, and an unvalidated report link.

스캔된 파일

2,906

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (7)

높음

SKILL.md:92-97 SKILL.md:118-121 scripts/collect_sessions.py:304-332

Untrusted Transcript and Skill Content Enters Agent Context

The workflow asks the agent to read historical transcripts and installed skill files without a clear untrusted-data boundary. The narrow tag filter does not cover ordinary prompt-injection prose or tool outputs.

The skill explicitly loads transcript and skill text into the scoring workflow, while the collector filters only a short list of tag-shaped prefixes.

높음

SKILL.md:31-42 scripts/collect_sessions.py:935-944 scripts/collect_sessions.py:969-978

Conversation Scope Is Enforced After Content Parsing

For Claude Code and Codex, the collector parses each recent session before checking whether its working directory matches the selected projects. This reads out-of-scope conversation content into memory.

The control flow calls each full session parser before the repository-scope condition, directly contradicting the user-selected project boundary.

중간

scripts/collect_sessions.py:519

SQLite database file

candidates.append(root / "warp.sqlite")

The collector discovers local Warp SQLite databases and later queries conversation records. Connections are read-only, but the records can contain sensitive conversation content.

중간

scripts/collect_sessions.py:521

SQLite database file

candidates.extend(root.glob("*/warp.sqlite"))

The collector discovers local Warp SQLite databases and later queries conversation records. Connections are read-only, but the records can contain sensitive conversation content.

중간

SKILL.md:53-56 scripts/collect_sessions.py:308-332 scripts/collect_sessions.py:1087-1090

Transcript Copies Lack Secret Redaction and Cleanup

The collector copies user messages, tool arguments, and tool outputs into persistent Markdown files. It truncates content but does not redact credentials or remove the scratch directory after use.

The source visibly writes condensed transcript fields to disk and contains no redaction or cleanup step.

중간

scripts/render_report.py:308

Report Link Scheme Is Not Validated

The renderer escapes cta_url for HTML but accepts any URI scheme. A crafted report can place a javascript or data URL behind the visible Request access link.

HTML escaping does not restrict URI schemes, and the value is read directly from report data before insertion into href.

낮음

assets/pierre-diffs.js:1

Unscanned file (too_large) — manual review required

[unscanned: too_large]

Force-confirmed metadata/low static finding; AI false-positive verdict rejected.

기능 검토 항목 (4)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

scripts/collect_sessions.py:48

Hidden file in home directory

default=os.environ.get("CLAUDE_CONFIG_DIR", "~/.claude"),

This default is later used to enumerate Claude Code project-history files under the user home. Those histories can contain private prompts, outputs, and tool data.

높음

scripts/collect_sessions.py:51

Hidden file in home directory

p.add_argument("--codex-home", default=os.environ.get("CODEX_HOME", "~/.codex"))

This default is later used to enumerate Codex rollout files under the user home. Those histories can contain private prompts, outputs, and tool data.

중간

scripts/collect_sessions.py:48

Hidden file access

default=os.environ.get("CLAUDE_CONFIG_DIR", "~/.claude"),

This default is later used to enumerate Claude Code project-history files under the user home. Those histories can contain private prompts, outputs, and tool data.

중간

scripts/collect_sessions.py:51

Hidden file access

p.add_argument("--codex-home", default=os.environ.get("CODEX_HOME", "~/.codex"))

This default is later used to enumerate Codex rollout files under the user home. Those histories can contain private prompts, outputs, and tool data.

위험 요인

⚙️ 외부 명령어 (50)

scripts/collect_sessions.py:90 scripts/collect_sessions.py:857 scripts/render_report.py:103 scripts/test_render_report.py:48 scripts/test_render_report.py:49 scripts/test_render_report.py:50 scripts/test_render_report.py:215 scripts/test_render_report.py:219 scripts/test_render_report.py:223-224 scripts/test_render_report.py:232 scripts/warp_decoder.py:4 scripts/warp_decoder.py:136 scripts/warp_decoder.py:286 scripts/warp_decoder.py:377 SKILL.md:13 SKILL.md:19 SKILL.md:25-27 SKILL.md:27-53 SKILL.md:53-55 SKILL.md:55-57 SKILL.md:57-62 SKILL.md:62-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-68 SKILL.md:68-73 SKILL.md:73-75 SKILL.md:75 SKILL.md:79-80 SKILL.md:80-81 SKILL.md:81-82 SKILL.md:82-83 SKILL.md:83-84 SKILL.md:84-85 SKILL.md:85-86 SKILL.md:86-88 SKILL.md:88 SKILL.md:94-95 SKILL.md:95-97 SKILL.md:97 SKILL.md:101-102 SKILL.md:102 SKILL.md:103-104 SKILL.md:104-105 SKILL.md:105-106 SKILL.md:106 SKILL.md:107-109 SKILL.md:109 SKILL.md:113-114

📁 파일 시스템 접근 (23)

🔑 환경 변수 (6)

scripts/collect_sessions.py:48 scripts/collect_sessions.py:51 scripts/collect_sessions.py:60 scripts/collect_sessions.py:510 scripts/collect_sessions.py:512 scripts/collect_sessions.py:513

🌐 네트워크 접근 (3)

scripts/render_report.py:308 scripts/test_render_report.py:104 SKILL.md:152

⚡ 스크립트 포함 (2)

scripts/test_collect_sessions.py:11-17 scripts/test_render_report.py:8-14

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/warpdotdev-skill-doctor/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/warpdotdev-skill-doctor/security.svg)](https://skillstore.io/skills/warpdotdev-skill-doctor?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/warpdotdev-skill-doctor?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/warpdotdev-skill-doctor/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/warpdotdev-skill-doctor.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

warpdotdev. (2026). skill-doctor security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/warpdotdev-skill-doctor/audits/1

BibTeX 인용

@techreport{warpdotdev-warpdotdev-skill-doctor-2026,
  author = {warpdotdev},
  title = {skill-doctor security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/warpdotdev-skill-doctor/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-doctor security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "warpdotdev"
date-released: "2026-08-28"
url: "https://skillstore.io/skills/warpdotdev-skill-doctor/audits/1"
identifiers:
  - type: other
    value: "skillstore:warpdotdev-skill-doctor:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Review Project Agent Performance

Score recent project conversations and identify repeated inefficiency or code-quality failures.

Audit Team Skill Adoption

Measure which installed skills appear in sampled sessions and where trigger descriptions may fail.

Prepare Skill Improvements

Generate evidence-linked draft edits and review diffs before changing live skill files.

이 프롬프트를 사용해 보세요

Grade This Project

Grade recent conversations in this repository. Evaluate project and global skills, then show the report and proposed changes.

Review Selected Projects

Analyze conversations from these project paths: [paths]. Use the last [days] days and sample at most [count] sessions.

Audit Project Skills Only

Grade conversations for [project]. Evaluate project skills only, exclude subagents, and explain every recommendation with failed-session evidence.

Run a Cross-Harness Audit

Analyze all local conversations across supported harnesses. Include subagents, compare recurring failures, and draft only improvements supported by repeated evidence.