Навыки decision-records

📦

decision-records

Name: decision-records
Author: skymavis

Ревизия содержимого r1 Высокий риск 📁 Доступ к файловой системе⚙️ Внешние команды🌐 Доступ к сети

Manage Decision Records Consistently

Decision records become stale when identifiers, links, and lifecycle states drift. This skill manages drafts, promotions, indexes, validation, and cross-references.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "decision-records" from https://skillstore.io/skills/skymavis-decision-records.md and its manifest at https://skillstore.io/api/skills/skymavis-decision-records/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/skymavis-decision-records.md Подписанный manifest GET /api/skills/skymavis-decision-records/manifest Подписанный lockfile GET /api/skills/skymavis-decision-records/lockfile

Протестировать

Использование «decision-records». Draft a decision to standardize PostgreSQL for transactional services.

Ожидаемый результат:

A draft decision with context, PostgreSQL as the proposed choice, evaluated alternatives, consequences, risks, and a four-letter draft identifier.

Использование «decision-records». Check the decision registry before merge.

Ожидаемый результат:

A concise validation result listing stale indexes, invalid metadata, broken references, or a successful check when no issues remain.

Использование «decision-records». Promote the approved authentication draft.

Ожидаемый результат:

A numbered accepted record, refreshed inbound links, an updated index, and a final validation result after explicit approval.

Аудит безопасности

Высокий риск

v1 • 25.08.2026 Открыть версионный отчет

All 288 static alerts are false positives caused by Markdown backticks, draft mnemonics, relative links, placeholder URLs, or argument-array Git subprocesses. Manual review found a high-severity persistent agent-instruction pattern and a medium-severity installer overwrite risk.

Просканировано файлов

3,006

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий

templates/AGENTS.md:3-9 scripts/decisions.py:1356-1363

Prompt Injection Attempt Detected

The scaffold says "The skill is authoritative" and "when this file and the skill disagree, the skill wins." This persistent priority claim can override repository instructions and steer future agents toward installing or obeying the skill.

The template explicitly claims instruction precedence, and the installer writes a binding agent directive into a root AGENTS.md when none exists.

Средний

scripts/decisions.py:1322-1324

Installer Deletes an Existing Project Script

Installation unlinks an existing scripts/decisions.py before creating the skill symlink. This can destroy an unrelated tracked or untracked project script without backup or confirmation.

The code unconditionally calls unlink when the destination exists, including regular files, despite nearby documentation claiming installation never overwrites files.

Факторы риска

📁 Доступ к файловой системе (26)

⚙️ Внешние команды (50)

🌐 Доступ к сети (3)

scripts/decisions.py:1217 tests/test_decisions.py:514 tests/test_decisions.py:524

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/skymavis-decision-records/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/skymavis-decision-records/security.svg)](https://skillstore.io/skills/skymavis-decision-records?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/skymavis-decision-records?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/skymavis-decision-records/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/skymavis-decision-records.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

skymavis. (2026). decision-records security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/skymavis-decision-records/audits/1

Цитата BibTeX

@techreport{skymavis-skymavis-decision-records-2026,
  author = {skymavis},
  title = {decision-records security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/skymavis-decision-records/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "decision-records security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "skymavis"
date-released: "2026-08-25"
url: "https://skillstore.io/skills/skymavis-decision-records/audits/1"
identifiers:
  - type: other
    value: "skillstore:skymavis-decision-records:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Capture Architecture Decisions

Create structured drafts for technical choices, alternatives, consequences, and related records.

Maintain Governance Records

Track policy, legal, security, or operational decisions through accepted and retired states.

Validate Documentation in CI

Detect stale indexes, broken links, invalid metadata, duplicate identifiers, and lifecycle inconsistencies before merge.

Попробуйте эти промпты

Create a Decision Draft

Create a decision draft about [topic]. Include context, the proposed decision, rationale, alternatives, consequences, risks, and relevant record references.

Review a Draft

Review draft [ID] for complete front matter, clear rationale, realistic alternatives, consequences, unresolved risks, and valid decision references. Suggest focused edits.

Prepare an Approved Promotion

I approve promoting draft [ID]. Check dependencies and replacement effects, show the planned changes, then promote it and validate the decision registry.

Supersede a Decision Safely

Draft a replacement for decision [ID] using these changes: [changes]. Map affected references, explain consequences, and wait for approval before promotion.

Лучшие практики

Keep each record focused on one decision with explicit context, alternatives, consequences, and deciders.
Reference records by identifier and regenerate links and the index after lifecycle changes.
Review promotion plans and obtain explicit approval before accepting or superseding records.

Избегать

Do not edit generated indexes or generated record links by hand.
Do not rewrite an accepted decision to change direction; create a superseding record.
Do not promote drafts with unresolved references, incomplete metadata, or missing human approval.