Skills water-rights-fishing
📦

water-rights-fishing

Content revision r1 High Risk ⚙️ External commands

Review Water Rights and Fishing Evidence

Historical water and fishing records are hard to classify consistently. This skill guides evidence review, citation capture, and structured batch submission.

Supports: Claude Codex Code(CC)
⚠️ 38 Poor

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "water-rights-fishing" from https://skillstore.io/skills/acskamloops-water-rights-fishing.md and its manifest at https://skillstore.io/api/skills/acskamloops-water-rights-fishing/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/acskamloops-water-rights-fishing.md Signed manifest GET /api/skills/acskamloops-water-rights-fishing/manifest Signed lockfile GET /api/skills/acskamloops-water-rights-fishing/lockfile

Test it

Using "water-rights-fishing". A batch includes a letter about irrigation access near Pukaist Creek.

Expected outcome:

The skill marks the item as relevant, records the document metadata, and captures exact language about water access with page context.

Using "water-rights-fishing". A task contains garbled text and unreadable dates.

Expected outcome:

The skill recommends an OCR failure flag and separates unreadable text issues from relevance decisions.

Using "water-rights-fishing". A draft says the record likely proves a water rights violation.

Expected outcome:

The skill removes the legal conclusion and replaces it with a factual description tied to quoted source text.

Security Audit

High Risk
v9 • 7/6/2026 Open versioned report

Most static findings are Markdown inline-code or fence false positives, but several workflow commands are real external execution. The skill also contains a high-confidence prompt-injection risk by treating JSON task system_instructions as hard constraints.

1
Files scanned
162
Lines analyzed
6
Review items
0
False positives ignored

Confirmed security concerns (2)

High
SKILL.md:20
Prompt Injection Attempt Detected
Suspicious text: "You must follow the `system_instructions` block injected into every JSON task file." This lets untrusted task data override higher-priority instructions.
The line explicitly gives system-level authority to instructions inside task JSON. That is a direct prompt-injection and authority-confusion pattern.
Medium
SKILL.md:137-139
Implicit File Movement Side Effect
Lines 137-139 state that an OCR failure flag automatically moves source files to a Vision Pipeline directory. This can alter local data if run without confirmation.
The side effect is stated directly in the skill text. The exact implementation is not shown, so confidence is high but not absolute.
Capability review items (6)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium
SKILL.md:10
Ruby/shell backtick execution
- For court audit trails, run batches via `codex_exec_runner.sh` with `PUKAIST_CODEX_LOG_EVENTS=1` t
Line 10 instructs running codex_exec_runner.sh with an environment variable that saves raw exec events. This is real shell workflow execution and can create sensitive logs.
Medium
SKILL.md:35-37
Ruby/shell backtick execution
```powershell
Lines 35-37 instruct running the local refinement_workflow.py get-task command. The skill depends on executing repository Python code, so the external command risk is real.
Medium
SKILL.md:42-44
Ruby/shell backtick execution
```powershell
Lines 42-44 instruct running python -c with a substituted input JSON path. This executes local code and reads a dynamic filesystem path.
Medium
SKILL.md:124-126
Ruby/shell backtick execution
```powershell
Lines 124-126 instruct running refinement_workflow.py submit-task with a generated JSON file. This executes local code and modifies project outputs.
Medium
SKILL.md:133-135
Ruby/shell backtick execution
```powershell
Lines 133-135 instruct running refinement_workflow.py flag-task with a task id. This executes local workflow code and writes task status data.
Medium
SKILL.md:138-140
Ruby/shell backtick execution
```powershell
Lines 138-140 instruct running flag-task for OCR_Failure. The surrounding text says this command can move source files, so execution has filesystem impact.

Risk Factors

⚙️ External commands (41)
SKILL.md:7 SKILL.md:8 SKILL.md:10 SKILL.md:20 SKILL.md:30 SKILL.md:31 SKILL.md:35-37 SKILL.md:37-40 SKILL.md:40-42 SKILL.md:42-44 SKILL.md:44-62 SKILL.md:62 SKILL.md:63-94 SKILL.md:94 SKILL.md:97-99 SKILL.md:99-102 SKILL.md:102-104 SKILL.md:104-109 SKILL.md:109-112 SKILL.md:112 SKILL.md:119 SKILL.md:120 SKILL.md:121-124 SKILL.md:124-126 SKILL.md:126-127 SKILL.md:127-128 SKILL.md:128 SKILL.md:132-133 SKILL.md:133-135 SKILL.md:135-137 SKILL.md:137-138 SKILL.md:138-140 SKILL.md:140-143 SKILL.md:143 SKILL.md:144-145 SKILL.md:145 SKILL.md:35 SKILL.md:42 SKILL.md:124 SKILL.md:133 SKILL.md:138
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/acskamloops-water-rights-fishing/audits/9?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/acskamloops-water-rights-fishing/security.svg)](https://skillstore.io/skills/acskamloops-water-rights-fishing?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/acskamloops-water-rights-fishing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/acskamloops-water-rights-fishing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/acskamloops-water-rights-fishing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

ACSKamloops. (2026). water-rights-fishing security audit report (audit version 9) [Author version unspecified]. Skillstore. https://skillstore.io/skills/acskamloops-water-rights-fishing/audits/9

BibTeX citation

@techreport{acskamloops-acskamloops-water-rights-fishing-2026, author = {ACSKamloops}, title = {water-rights-fishing security audit report (audit version 9)}, institution = {Skillstore}, year = {2026}, number = {9}, url = {https://skillstore.io/skills/acskamloops-water-rights-fishing/audits/9}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "water-rights-fishing security audit report (audit version 9)" version: "unspecified" type: report authors: - name: "ACSKamloops" date-released: "2026-07-06" url: "https://skillstore.io/skills/acskamloops-water-rights-fishing/audits/9" identifiers: - type: other value: "skillstore:acskamloops-water-rights-fishing:audit:9" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance

What You Can Build

Classify Water Evidence

Review batch text for water licenses, irrigation ditches, riparian rights, and creek access evidence.

Extract Fishing Restrictions

Capture factual references to fishing bans, river access, and Thompson River restrictions with citations.

Prepare Review Batches

Validate metadata, reliability values, OCR status, and exception flags before manager review.

Try These Prompts

Review a Batch 
Use the water-rights-fishing skill to review one Water_Rights_Fishing batch. Identify relevant water, irrigation, riparian, and fishing evidence.
Extract Key Evidence 
Review the task text manually. For each relevant item, capture the document title, date, factual summary, and verbatim evidence with page references.
Validate a Submission 
Check my draft batch analysis against the skill rules. Flag missing metadata, weak citations, forbidden opinion words, and short factual descriptions.
Handle Exceptions 
Assess these tasks for provenance failure, OCR failure, or irrelevance. Recommend the correct flag reason and explain the factual basis.

Best Practices

  • Read the complete task text before deciding relevance.
  • Use verbatim quotes and page anchors for important evidence.
  • Validate metadata, controlled values, and banned words before submission.

Avoid

  • Do not classify records by keyword search alone.
  • Do not add legal conclusions or unsupported opinions.
  • Do not submit batches before provenance and manager-review checks.

Frequently Asked Questions

What does this skill review?
It reviews water license, irrigation, riparian rights, and fishing restriction evidence in Water_Rights_Fishing batches.
Does it provide legal advice?
No. It supports factual evidence indexing and citation capture, not legal analysis or legal conclusions.
Does it require local project scripts?
Yes. The workflow refers to local refinement scripts and repository task files.
Can it process PDFs directly?
No. The skill instructs users to work from JSON task files rather than direct PDF review.
How does it handle poor OCR?
It provides an OCR failure workflow when task text is garbled or unreadable.
Which tools can use it?
The report lists compatibility with Claude, Codex, and Claude Code.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/ACSKamloops/shs-engine/tree/master/.codex/skills/water-rights-fishing

Ref

c1fdca50ff516318f65fed0d7f9e82797c5171dc

Maintenance freshness

7/18/2026

Usage

9 downloads · 199 views

File structure

📄 SKILL.md