Skills scope
๐Ÿ“ฆ

scope

Content revision r2 Medium Risk โš™๏ธ External commands

Define Project Scope and Approve the Stack

Unclear requirements cause scope creep and premature technology choices. This skill converts requirements and research into prioritized scope, effort estimates, and an approved technology stack.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 69 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "scope" from https://skillstore.io/skills/cubha-scope.md and its manifest at https://skillstore.io/api/skills/cubha-scope/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "scope". Scope a lightweight appointment booking MVP for one clinic.

Expected outcome:

  • Must: available time slots, booking, cancellation, and clinic notifications.
  • Should: reminder messages and basic appointment management.
  • Won't now: payments, multiple clinics, and insurance processing.
  • Risk: calendar synchronization needs validation before implementation.

Using "scope". Compare stacks for a small internal inventory tool and require approval.

Expected outcome:

Recommended stack: a browser interface, managed relational database, and company identity provider. Approval is required before the stack enters the SCOPE document.

Using "scope". Create the scope in conversation without writing a file.

Expected outcome:

The response includes the project definition, prioritized features, relative estimates, approved stack, risks, and unresolved decisions.

Security Audit

Medium Risk
v4 โ€ข 7/23/2026 Open versioned report

All 31 external-command alerts are Markdown formatting or benign command documentation, not Ruby or shell backtick execution. The entropy alert reflects Korean and Unicode text, not obfuscation. Two medium semantic risks remain around unrestricted research paths and treating loaded research as trusted instructions.

1
Files scanned
245
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (2)

Medium
Unrestricted Research File Path
The --from option triggers a read of the supplied path without explicit normalization, traversal rejection, or confinement to docs/research.
The documented option accepts a file and directs the agent to read it. The skill recommends a RESEARCH file but states no enforceable path boundary.
Medium
Untrusted Research Content Is Used as Decision Input
Discovered or supplied research Markdown is loaded as decision evidence without instructions to ignore embedded commands or prompt injections.
Lines 42-47 explicitly load research documents and use their contents as decision grounds. No trust boundary or instruction filtering is specified.
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/cubha-scope/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cubha-scope/security.svg)](https://skillstore.io/skills/cubha-scope?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cubha-scope?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cubha-scope/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cubha-scope.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

cubha. (2026). scope security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cubha-scope/audits/4

BibTeX citation

@techreport{cubha-cubha-scope-2026, author = {cubha}, title = {scope security audit report (audit version 4)}, institution = {Skillstore}, year = {2026}, number = {4}, url = {https://skillstore.io/skills/cubha-scope/audits/4}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "scope security audit report (audit version 4)" version: "unspecified" type: report authors: - name: "cubha" date-released: "2026-07-23" url: "https://skillstore.io/skills/cubha-scope/audits/4" identifiers: - type: other value: "skillstore:cubha-scope:audit:4" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
55
Architecture
85
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Prioritize an MVP

Convert product requirements into Must, Should, Could, and Won't features with relative effort.

Select a Practical Stack

Compare technology options against required features before committing development resources.

Create an Engineering Handoff

Produce an approved scope document that can guide planning and project scaffolding.

Try These Prompts

Scope a Simple Project
Define the scope for [project]. The target user is [user], and the main problem is [problem].
Prioritize an MVP
Scope an MVP for [project]. Separate features with MoSCoW priorities and estimate Must and Should items with T-shirt sizes.
Use Existing Research
Scope [project] using [research file]. Compare only stack categories required by Must features, then ask for approval.
Evaluate Constraints and Risks
Create a scope for [project] under [constraints]. Identify uncertain XL items, compare stack tradeoffs, record rejected options, and require approval.

Best Practices

  • Provide the target user, core problem, deployment constraints, and excluded technologies.
  • Keep Must features limited to the smallest set that delivers the core value.
  • Review XL estimates and stack tradeoffs before approving the final document.

Avoid

  • Do not treat every requested feature as a Must requirement.
  • Do not accept a technology stack without reviewing its fit and tradeoffs.
  • Do not use relative estimates as guaranteed delivery dates.

Frequently Asked Questions

Does this skill write application code?
No. It creates scope documentation and leaves code generation to later workflows.
What does the skill need to begin?
Provide a project idea or requirements. Target users, constraints, and research improve the result.
Can it use an existing research document?
Yes. Provide a RESEARCH Markdown file or let the skill search docs/research.
How are effort estimates expressed?
Features receive S, M, L, or XL relative sizes. These values show scale and uncertainty.
Can I skip technology selection?
Yes. Use the documented skip-stack option to perform scope planning without the approval gate.
Will it overwrite an existing SCOPE document?
No. It creates a dated document and keeps existing SCOPE files.

Developer Details

Author

cubha

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Ref

c43861a65bb95efcae259cd161c9d6f4dc7eec6f

Maintenance freshness

7/24/2026

Usage

0 downloads ยท 0 views

File structure

๐Ÿ“„ SKILL.md

More from cubha

View all
View all