Skills loki-mode

📦

loki-mode

Name: loki-mode
Author: sickn33

Content revision r1 Critical ⚙️ External commands🌐 Network access📁 Filesystem access⚡ Contains scripts🔑 Env variables

Orchestrate Multi-Agent Product Delivery

Complex product work can require coordination across planning, coding, testing, and operations. Loki Mode provides a structured multi-agent workflow with task queues, checkpoints, and review steps.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "loki-mode" from https://skillstore.io/skills/sickn33-loki-mode.md and its manifest at https://skillstore.io/api/skills/sickn33-loki-mode/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-loki-mode.md Signed manifest GET /api/skills/sickn33-loki-mode/manifest Signed lockfile GET /api/skills/sickn33-loki-mode/lockfile

Test it

Using "loki-mode". Create a plan for an authenticated reporting endpoint.

Expected outcome:

Discovery tasks for data and access requirements.
Implementation tasks for the endpoint and tests.
A review checkpoint before database or deployment changes.

Using "loki-mode". Prepare a release-readiness workflow.

Expected outcome:

A prioritized checklist for tests, documentation, and monitoring.
Assigned review stages with clear completion criteria.
An approval gate before publishing or deployment.

Security Audit

Critical

v5 • 7/21/2026 Open versioned report

Static destructive-command, screen-capture, weak-cryptography, environment, and long-line alerts are false positives: they are blocklist text, documentation, local demo tooling, or benchmark artifacts. However, the skill explicitly requires a permission bypass and directs unsupervised execution without confirmations; it also contains a dashboard HTML injection risk. Publishing should remain blocked until these issues are remediated. Static review was capped at 400/5857 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

1082

Files scanned

72,871

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

Critical

SKILL.md:93-110

Unsupervised execution and permission-bypass directive

The skill instructs users to launch with a permission-bypass flag and directs agents never to ask questions, wait for confirmation, or stop voluntarily. This removes essential approval controls before file, command, deployment, and business actions.

The cited installation and core rules explicitly require permission bypass and zero human intervention. The unsafe operating intent is direct and unambiguous.

High

autonomy/run.sh:714-745

Unescaped dashboard data inserted into HTML

The dashboard interpolates agent and task values into HTML strings assigned through innerHTML without escaping. Malicious values in local state JSON can execute script in the dashboard context.

The cited render functions concatenate agent and task fields into HTML, and later dashboard code assigns generated strings with innerHTML. No escaping is visible in the cited path.

Risk Factors

⚙️ External commands (50)

autonomy/CONSTITUTION.md:40 autonomy/run.sh:725-739 autonomy/run.sh:744 autonomy/run.sh:745 autonomy/run.sh:56 autonomy/run.sh:57 autonomy/run.sh:163 autonomy/run.sh:174 autonomy/run.sh:184 autonomy/run.sh:194 autonomy/run.sh:202 autonomy/run.sh:294 autonomy/run.sh:296 autonomy/run.sh:321 autonomy/run.sh:326 autonomy/run.sh:327 autonomy/run.sh:328 autonomy/run.sh:329 autonomy/run.sh:336 autonomy/run.sh:810 autonomy/run.sh:840 autonomy/run.sh:841 autonomy/run.sh:844 autonomy/run.sh:853 autonomy/run.sh:854 autonomy/run.sh:855 autonomy/run.sh:856 autonomy/run.sh:857 autonomy/run.sh:858 autonomy/run.sh:859 autonomy/run.sh:861 autonomy/run.sh:862 autonomy/run.sh:863 autonomy/run.sh:866 autonomy/run.sh:896 autonomy/run.sh:952 autonomy/run.sh:960-961 autonomy/run.sh:961 autonomy/run.sh:1018 autonomy/run.sh:1022 autonomy/run.sh:1026 autonomy/run.sh:1037 autonomy/run.sh:1046-1047 autonomy/run.sh:1222 autonomy/run.sh:1225 autonomy/run.sh:1226 autonomy/run.sh:1246 autonomy/run.sh:1254 autonomy/run.sh:1255 autonomy/run.sh:1259

🌐 Network access (50)

📁 Filesystem access (50)

autonomy/README.md:187 autonomy/README.md:187 autonomy/run.sh:749 autonomy/run.sh:750 autonomy/run.sh:751 autonomy/run.sh:752 autonomy/run.sh:753 autonomy/run.sh:777 autonomy/run.sh:1072 autonomy/run.sh:1136 autonomy/run.sh:243 autonomy/run.sh:1013 autonomy/run.sh:1039 autonomy/run.sh:1057 autonomy/run.sh:1072 autonomy/run.sh:1136 autonomy/run.sh:79 autonomy/run.sh:162 autonomy/run.sh:163 autonomy/run.sh:173 autonomy/run.sh:183 autonomy/run.sh:193 autonomy/run.sh:201 autonomy/run.sh:208 autonomy/run.sh:217 autonomy/run.sh:294 autonomy/run.sh:321 autonomy/run.sh:326 autonomy/run.sh:327 autonomy/run.sh:328 autonomy/run.sh:329 autonomy/run.sh:373 autonomy/run.sh:374 autonomy/run.sh:810 autonomy/run.sh:939 autonomy/run.sh:940 autonomy/run.sh:1175 autonomy/run.sh:1177 autonomy/run.sh:1193 autonomy/run.sh:1199 autonomy/run.sh:1211 autonomy/run.sh:1212 autonomy/run.sh:1246 autonomy/run.sh:1306 autonomy/run.sh:1307 autonomy/run.sh:1328 autonomy/run.sh:1333 autonomy/run.sh:1364 autonomy/run.sh:1377 autonomy/run.sh:1390

⚡ Contains scripts (50)

🔑 Env variables (45)

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-loki-mode/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-loki-mode/security.svg)](https://skillstore.io/skills/sickn33-loki-mode?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-loki-mode?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-loki-mode/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-loki-mode.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

sickn33. (2026). loki-mode security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-loki-mode/audits/5

BibTeX citation

@techreport{sickn33-sickn33-loki-mode-2026,
  author = {sickn33},
  title = {loki-mode security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/sickn33-loki-mode/audits/5},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "loki-mode security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
  - name: "sickn33"
date-released: "2026-07-21"
url: "https://skillstore.io/skills/sickn33-loki-mode/audits/5"
identifiers:
  - type: other
    value: "skillstore:sickn33-loki-mode:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a new service

Turn a product brief into phased architecture, development, testing, and release tasks.

Coordinate release readiness

Organize review, test, documentation, and deployment preparation tasks in one workflow.

Evaluate agent workflows

Use the local dashboard and benchmark materials to study multi-agent coordination patterns.

Try These Prompts

Start a small workflow

Loki Mode, create a plan for a small API feature. Stop after the plan and ask for approval before making changes.

Prepare release tasks

Loki Mode, organize release-readiness tasks for this repository. Include tests, documentation, and a human approval checkpoint.

Coordinate a feature

Loki Mode, break this approved feature into scoped implementation and review tasks. Keep all changes inside the repository and require approval before deployment.

Review workflow controls

Loki Mode, audit this workflow plan for unsafe permissions, external actions, and missing approval gates. Produce recommendations only.

Best Practices

Keep workflows scoped to a repository and approved objective.
Require human approval before deployments, external messages, or permission changes.
Set conservative agent limits and verify each completed task.

Avoid

Do not run with unrestricted permissions for routine work.
Do not allow agents to deploy or contact services without approval.
Do not treat generated plans or benchmarks as proof of production readiness.

Frequently Asked Questions

What does Loki Mode provide?

It provides instructions and supporting scripts for coordinating multi-agent product delivery work.

Does it deploy products automatically?

It describes deployment workflows, but deployments should require explicit human approval.

Which tools are supported?

The listing declares compatibility with Claude, Codex, and Claude Code.

Can I use it for a small task?

Yes. Limit the scope, agent count, and allowed paths for small tasks.

Does it need unrestricted permissions?

No. Use normal permissions and approve sensitive actions individually.

Why is this listing restricted?

The source instructions require dangerous permission bypasses and prohibit confirmation, which is unsafe.

Developer Details

Author

sickn33

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/loki-mode

Ref

c7830d47eaa856f41e62493881df761fc6900356

Maintenance freshness

7/21/2026

Usage

19 downloads · 109 views

File structure

📁 autonomy/

📄 CONSTITUTION.md

📄 README.md

📄 run.sh

📁 benchmarks/

📁 datasets/

📄 humaneval.jsonl

📄 swebench-lite.json

📁 results/

📁 2026-01-05-00-23-56/

📄 humaneval-results.json

📄 SUMMARY.md

📄 swebench-results.json

📁 2026-01-05-00-49-17/

📁 humaneval-solutions/

📄 humaneval-results.json

📄 SUMMARY.md

📁 2026-01-05-01-24-17/

📁 swebench-patches/

📄 SUMMARY.md

📄 swebench-predictions.json

📄 swebench-results.json

📁 2026-01-05-01-35-39/

📁 swebench-patches/

📄 SUMMARY.md

📄 swebench-predictions.json

📄 swebench-results.json

📁 2026-01-05-10-37-54/

📁 swebench-loki-patches/

📄 SUMMARY.md

📄 swebench-loki-predictions.json

📄 swebench-loki-results.json

📁 humaneval-loki-solutions/

📄 0.py

📄 1.py

📄 10.py

📄 100.py

📄 101.py

📄 102.py

📄 103.py

📄 104.py

📄 105.py

📄 106.py

📄 107.py

📄 108.py

📄 109.py

📄 11.py

📄 110.py

📄 111.py

📄 112.py

📄 113.py

📄 114.py

📄 115.py

📄 116.py

📄 117.py

📄 118.py

📄 119.py

📄 12.py

📄 120.py

📄 121.py

📄 122.py

📄 123.py

📄 124.py

📄 125.py

📄 126.py

📄 127.py

📄 128.py

📄 129.py

📄 13.py

📄 130.py

📄 131.py

📄 132.py

📄 133.py

📄 134.py

📄 135.py

📄 136.py

📄 137.py

📄 138.py

📄 139.py

📄 14.py

📄 140.py

📄 141.py

📄 142.py

📄 143.py

📄 144.py

📄 145.py

📄 146.py

📄 147.py

📄 148.py

📄 149.py

📄 15.py

📄 150.py

📄 151.py

📄 152.py

📄 153.py

📄 154.py

📄 155.py

📄 156.py

📄 157.py

📄 158.py

📄 159.py

📄 16.py

📄 160.py

📄 161.py

📄 162.py

📄 163.py

📄 17.py

📄 18.py

📄 19.py

📄 2.py

📄 20.py

📄 21.py

📄 22.py

📄 23.py

📄 24.py

📄 25.py

📄 26.py

📄 27.py

📄 28.py

📄 29.py

📄 3.py

📄 30.py

📄 31.py

📄 32.py

📄 33.py

📄 34.py

📄 35.py

📄 36.py

📄 37.py

📄 38.py

📄 39.py

📄 4.py

📄 40.py

📄 41.py

📄 42.py

📄 43.py

📄 44.py

📄 45.py

📄 46.py

📄 47.py

📄 48.py

📄 49.py

📄 5.py

📄 50.py

📄 51.py

📄 52.py

📄 53.py

📄 54.py

📄 55.py

📄 56.py

📄 57.py

📄 58.py

📄 59.py

📄 6.py

📄 60.py

📄 61.py

📄 62.py

📄 63.py

📄 64.py

📄 65.py

📄 66.py

📄 67.py

📄 68.py

📄 69.py

📄 7.py

📄 70.py

📄 71.py

📄 72.py

📄 73.py

📄 74.py

📄 75.py

📄 76.py

📄 77.py

📄 78.py

📄 79.py

📄 8.py

📄 80.py

📄 81.py

📄 82.py

📄 83.py

📄 84.py

📄 85.py

📄 86.py

📄 87.py

📄 88.py

📄 89.py

📄 9.py

📄 90.py

📄 91.py

📄 92.py

📄 93.py

📄 94.py

📄 95.py

📄 96.py

📄 97.py

📄 98.py

📄 99.py

📄 humaneval-loki-results.json

📄 SUMMARY.md

📁 submission-template/

📄 metadata.yaml

📄 README.md

📄 prepare-submission.sh

📄 run-benchmarks.sh

📁 demo/

📁 recordings/

📄 loki-demo.cast

📄 loki-demo.gif

📄 README.md

📄 record-demo.sh

📄 record-full-demo.sh

📄 run-demo-auto.sh

📄 run-demo.sh

📄 vhs-tape.tape

📄 voice-over-script.md

📁 docs/

📁 screenshots/

📄 dashboard-agents.png

📄 dashboard-tasks.png

📄 README.md

📄 COMPETITIVE-ANALYSIS.md

📁 examples/

📁 todo-app-generated/

📁 backend/

📁 src/

📄 package.json

📄 todos.db-shm

📄 todos.db-wal

📄 tsconfig.json

📁 frontend/

📁 src/

📄 index.html

📄 package.json

📄 tsconfig.json

📄 tsconfig.node.json

📄 vite.config.ts

📄 E2E_VERIFICATION_REPORT.md

📄 PRD.md

📄 TASK_018_COMPLETION.md

📄 TEST_REPORT.md

📄 TESTING_DOCUMENTATION.md

📄 VERIFICATION_SUMMARY.txt

📄 api-only.md

📄 full-stack-demo.md

📄 simple-todo-app.md

📄 static-landing-page.md

📁 integrations/

📄 vibe-kanban.md

📁 references/

📄 advanced-patterns.md

📄 agent-types.md

📄 agents.md

📄 business-ops.md

📄 core-workflow.md

📄 deployment.md

📄 lab-research-patterns.md

📄 memory-system.md

📄 openai-patterns.md

📄 production-patterns.md

📄 quality-control.md

📄 sdlc-phases.md

📄 task-queue.md

📄 tool-orchestration.md

📁 scripts/

📄 export-to-vibe-kanban.sh

📄 loki-wrapper.sh

📄 take-screenshots.js

📁 tests/

📄 run-all-tests.sh

📄 test-agent-timeout.sh

📄 test-bootstrap.sh

📄 test-circuit-breaker.sh

📄 test-state-recovery.sh

📄 test-task-queue.sh

📄 test-wrapper.sh

📄 ACKNOWLEDGEMENTS.md

📄 CHANGELOG.md

📄 CONTEXT-EXPORT.md

📄 INSTALLATION.md

📄 LICENSE

📄 README.md

📄 SKILL.md

📄 VERSION

More from sickn33

View all

📦

content-creator

Create Brand-Consistent Marketing Content

Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.

Writing & Content View

📦

prompt-engineering-patterns

Improve LLM Prompts With Proven Patterns

Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.

Productivity View

📦

senior-fullstack

Build Fullstack Apps with Senior Patterns

Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.

Coding & Development View

📦

senior-architect

Design Scalable Software Architectures

Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.

Coding & Development View

📦

prompt-engineer

Optimize AI Prompts With Prompt Engineer

Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.

Productivity View

📦

product-manager-toolkit

Prioritize Product Work With Research Insights

Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.

Productivity View

View all

📦

marketplace-release

Automate Marketplace Plugin Releases

by Emasoft

Marketplace maintainers must release plugins without mixing versions across a shared repository. This skill guides validation, version updates, tags, pushes, and GitHub releases for one plugin at a time.

DevOps & Infrastructure View

📦

multi-agent-patterns

Design Multi-Agent Architectures

by ChakshuGautam

Complex agent work can fail when one context window carries every task. This skill helps Claude, Codex, and Claude Code design agent systems with clear handoffs.

Coding & Development View

📦

stream-chain

Build Streamed Multi-Agent Workflows

by DNYoussef

Sequential AI workflows often lose context between steps. This skill defines stream-chain patterns that pass each result into the next task.

Coding & Development View

📦

hive-mind-advanced

Coordinate Advanced Hive Mind Workflows

by DNYoussef

Large AI projects need clear agent roles, durable memory, and reliable decisions. This skill guides Claude Flow hive minds with queen-led coordination and consensus workflows.

Coding & Development View

📦

subagent-orchestration

Coordinate Parallel Subagent Workflows

by DieGopherLT

Multi-agent work can fail when tasks overlap or depend on hidden context. This skill helps Claude, Codex, and Claude Code plan bounded subagent assignments.

Coding & Development View

📦

cc-devflow-orchestrator

Route CC-DevFlow Workflows

by Dimon94

Teams lose time choosing the next CC-DevFlow command during complex delivery work. This skill maps project status, phase gates, and user intent to the right Claude, Codex, or Claude Code workflow.

Coding & Development View

loki-mode

Install with my Agent

Agent-readable resources

Test it

Security Audit

Confirmed security concerns (2)

Risk Factors

Copy report link

Markdown badge

HTML badge

Embed card

APA citation

BibTeX citation

CITATION.cff

Skillstore Score

What You Can Build

Plan a new service

Coordinate release readiness

Evaluate agent workflows

Try These Prompts

Best Practices

Avoid

Frequently Asked Questions

Developer Details

More from sickn33

content-creator

prompt-engineering-patterns

senior-fullstack

senior-architect

prompt-engineer

product-manager-toolkit

Related Skills

marketplace-release

multi-agent-patterns

stream-chain

hive-mind-advanced

subagent-orchestration

cc-devflow-orchestrator