技能 executor-initiative

📦

executor-initiative

Name: executor-initiative
Author: atri10

内容修订 r1 高风险 ⚙️ 外部命令📁 文件系统访问

Manage Initiative Intake and Lifecycle

Unclear scope and missing approval records make project decisions difficult to track. This skill guides request classification, charter writing, and lifecycle documentation through Executor.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "executor-initiative" from https://skillstore.io/skills/atri10-executor-initiative.md and its manifest at https://skillstore.io/api/skills/atri10-executor-initiative/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/atri10-executor-initiative.md 已签名 manifest GET /api/skills/atri10-executor-initiative/manifest 已签名 lockfile GET /api/skills/atri10-executor-initiative/lockfile

测试它

正在使用“executor-initiative”。 Can the admin dashboard share the existing server process?

预期结果:

Classification: Spike.
Deliverable: A feasibility recommendation, not retained implementation code.
Next step: Present the proposed investigation and wait for approval.
Initiative allocation: Not required.

正在使用“executor-initiative”。 Tenant bulk imports repeatedly degrade other tenants. Prepare a charter for an isolation initiative.

预期结果:

Classification: Architectural initiative.
Problem: One tenant can degrade service for other tenants.
Proposed criterion: Tenant API p99 remains below an agreed threshold during the bulk import fixture.
Non-goal: Cross-region failover.
Approval status: Pending confirmation of the problem statement and measurable criteria.

正在使用“executor-initiative”。 Add multi-region failover to an initiative approved only for tenant isolation.

预期结果:

Recommendation: Create a separate initiative.
Reason: Recovery-time requirements add success criteria beyond the approved isolation scope.
Relationship: Document a dependency only if the new work genuinely depends on the existing initiative.
Existing charter: Preserve its approved scope.

安全审计

高风险

v1 • 2026/10/5 打开版本化报告

All 168 static alerts are false positives for their reported patterns: Markdown delimiters, sibling references, a registry lock, and routine workflow operations. Two semantic risks remain: documented unlocked transitions can lose updates, and the verification checklist can record intake approval before charter presentation. No evidence found of malware, exfiltration, or audit-directed prompt injection; referenced dependency scripts were unavailable for review.

已扫描文件

706

分析行数

复核项

已忽略误报

已确认安全问题 (2)

高

SKILL.md:511-520 SKILL.md:233-258 SKILL.md:339-357

Verification Checklist Can Record Unapproved Intake

The checklist says to run checks when presenting the charter, including a state-changing intake-pass command. This can record approval before the required human decision.

The checklist directly requests a pass during presentation, while the intake gate requires prior approval. Documented artifact checks do not establish human authorization.

中

SKILL.md:109-120 SKILL.md:329-337 SKILL.md:390-392

Concurrent Transitions Can Lose Lifecycle Records

The skill states that phase and status updates lack locking and can lose updates in shared indexes. Prose serialization rules do not coordinate independent agents.

The source explicitly documents unlocked writes and lost updates. The dependency implementation was unavailable, so this finding concerns the documented workflow risk.

风险因素

⚙️ 外部命令 (50)

📁 文件系统访问 (11)

SKILL.md:8 SKILL.md:13 SKILL.md:91 SKILL.md:167 SKILL.md:230 SKILL.md:253 SKILL.md:308 SKILL.md:440 SKILL.md:516 SKILL.md:519 SKILL.md:113

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/atri10-executor-initiative/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/atri10-executor-initiative/security.svg)](https://skillstore.io/skills/atri10-executor-initiative?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/atri10-executor-initiative?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/atri10-executor-initiative/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/atri10-executor-initiative.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

atri10. (2026). executor-initiative security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/atri10-executor-initiative/audits/1

BibTeX 引用

@techreport{atri10-atri10-executor-initiative-2026,
  author = {atri10},
  title = {executor-initiative security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/atri10-executor-initiative/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "executor-initiative security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "atri10"
date-released: "2026-10-05"
url: "https://skillstore.io/skills/atri10-executor-initiative/audits/1"
identifiers:
  - type: other
    value: "skillstore:atri10-executor-initiative:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Classify an Incoming Engineering Request

Determine whether a request needs a feasibility answer, a bounded change, or a documented architectural initiative.

Prepare a Charter for Approval

Translate an architectural request into measurable outcomes, explicit scope boundaries, and named approval responsibilities.

Maintain Initiative Lifecycle Records

Document approved transitions, pauses, replacements, and closure while keeping the registry and initiative index consistent.

试试这些提示

Classify a Request

Classify this request: [request]. Explain whether it is a spike, bounded change, or architectural initiative. Do not change files.

Draft an Initiative Charter

Draft a charter for [initiative] with measurable criteria, non-goals, allowed paths, and [approver]. Present it for approval without recording a gate pass.

Evaluate Existing Initiative Scope

Compare [request] with the approved charter for [initiative ID]. Recommend attachment or separate allocation without widening approved scope or changing records.

Apply an Approved Lifecycle Transition

After confirming [approval evidence], record [transition] for [initiative ID]. Serialize updates, document skipped phases, verify both indexes, and preserve prior records.

最佳实践

Confirm dependency availability and inspect referenced scripts before authorizing execution.
Obtain explicit approval before recording any gate pass; treat pre-presentation verification as read-only.
Serialize lifecycle updates, verify both indexes, and redact secret values from tracked documents.

避免

Create initiatives for questions or bounded changes without a lasting architectural deliverable.
Widen an approved charter or mark a gate passed without a new human decision.
Run concurrent phase updates, delete historical records, or copy example identifiers and timestamps.

常见问题

Which AI tools can use this skill?

The report lists Claude, Codex, and Claude Code. Full operation also requires repository access and the referenced Executor dependencies.

Does every request need an initiative?

No. Feasibility spikes and most bounded changes do not. Architectural work receives an initiative or attaches to an existing approved scope.

Can this skill implement the project?

No. It coordinates intake and lifecycle records. Other Executor skills handle specifications, planning, execution, verification, and handoff.

Are the required scripts included?

No. The reviewed package contains instructions and examples. It references scripts and contract documents in a sibling Executor skill.

Does a successful command prove human approval?

No. Explicit human approval is required. The pre-presentation verification checklist should not run a state-changing intake-pass command.

Can multiple agents update phases simultaneously?

Not safely under the documented workflow. Phase and status changes lack locking, so serialize transitions and verify the resulting indexes.

开发者详情

作者

atri10

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/atri10/executor/tree/39ddcfe1d9f3497102622b72aa235fb0770187fe/skills/executor-initiative

引用

6d0b11444384184b7ae743742a7e233a9a705cd9

维护新鲜度

2026/10/6

使用量

0 次下载 · 0 次浏览

文件结构

📁 references/

📄 intake-examples.md

📄 SKILL.md