技能 project-min-evaluation
📦

project-min-evaluation

v1.0 内容修订 r1 安全 ⚙️ 外部命令

Verify Project Quality Before Completion

Completion reports can overlook failing checks or untested changes. This skill guides ordered execution of existing project scripts and reports failures, missing checks, and unverified scope.

支持: Claude Codex Code(CC)
📊 74 合格

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "project-min-evaluation" from https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation.md and its manifest at https://skillstore.io/api/skills/c3sc0-v4113-project-min-evaluation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/c3sc0-v4113-project-min-evaluation.md 已签名 manifest GET /api/skills/c3sc0-v4113-project-min-evaluation/manifest 已签名 lockfile GET /api/skills/c3sc0-v4113-project-min-evaluation/lockfile

测试它

正在使用“project-min-evaluation”。 Verify a repository with passing lint, typecheck, and test scripts but no other quality scripts.

预期结果:

  • Lint: passed.
  • Typecheck: passed.
  • Tests: passed.
  • Formatting check, doctor, and aggregate check: not defined.
  • End-to-end tests: not defined; no end-to-end behavior changed.
  • Unverified scope: checks without defined scripts.

正在使用“project-min-evaluation”。 Verify a change where the test script requires an unavailable local database.

预期结果:

  • Lint, typecheck, and formatting check: passed.
  • Tests: not run. Attempted command: npm run test.
  • Reported error: connection refused at 127.0.0.1:5432.
  • Later checks: not run because test verification could not complete.
  • Unverified scope: database-dependent tests and remaining quality checks.
  • Completion is not verified.

安全审计

安全
v1 • 2026/10/2 打开版本化报告

All 14 static findings are false positives caused by Markdown code spans, not Ruby or shell backtick execution. The workflow intentionally executes existing repository quality scripts, which require trusted project code. No evidence found of prompt injection, credential theft, or data exfiltration in the reviewed files.

2
已扫描文件
65
分析行数
0
复核项
0
已忽略误报

风险因素

⚙️ 外部命令 (14)
SKILL.md:19 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:34 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40 SKILL.md:44 SKILL.md:45
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/c3sc0-v4113-project-min-evaluation/security.svg)](https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/c3sc0-v4113-project-min-evaluation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/c3sc0-v4113-project-min-evaluation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

c3sc0-v4113. (2026). project-min-evaluation security audit report (audit version 1) [Author version 1.0]. Skillstore. https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation/audits/1

BibTeX 引用

@techreport{c3sc0-v4113-c3sc0-v4113-project-min-evaluation-2026, author = {c3sc0-v4113}, title = {project-min-evaluation security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation/audits/1}, note = {Author version 1.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "project-min-evaluation security audit report (audit version 1)" version: "1.0" type: report authors: - name: "c3sc0-v4113" date-released: "2026-10-02" url: "https://skillstore.io/skills/c3sc0-v4113-project-min-evaluation/audits/1" identifiers: - type: other value: "skillstore:c3sc0-v4113-project-min-evaluation:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
41
架构
85
可维护性
87
内容
65
社区
83
规范符合性

你能构建什么

Verify an implementation before handoff

Run available quality checks and identify any unverified scope before reporting a feature as complete.

Check a workspace change before commit

Run root checks and relevant package checks for touched workspace packages before committing.

Review verification evidence

Request exact failing commands, errors, and unavailable checks to assess whether a change is ready for review.

试试这些提示

Run basic quality checks 
Use project-min-evaluation to run this repository's existing minimum quality checks. Report passed, failed, missing, and unavailable checks.
Verify before committing 
Verify my changes before commit. Detect the package manager, run defined checks in order, and stop at the first failure.
Investigate a failed check 
Run project-min-evaluation, diagnose the first failure, fix it within the change scope, and resume from that check. Report remaining unverified scope.
Evaluate a workspace behavior change 
Evaluate this workspace change using root checks and checks for touched packages. Include test:e2e if behavior changed. Report lockfile conflicts and unavailable services.

最佳实践

  • Review repository script definitions and run them only in a trusted environment.
  • Resolve package manager conflicts before running checks.
  • Keep exact commands, errors, and unverified scope in the final verification report.

避免

  • Inventing commands for scripts that the project does not define.
  • Skipping a failing check to run later checks.
  • Reporting completion when required checks failed or could not run.

常见问题

Which assistants can use this skill?
The listing supports Claude, Codex, and Claude Code. Running checks requires repository access and command execution.
How does it choose the package manager?
The packageManager field takes priority. Otherwise, it uses pnpm, Bun, or npm lockfile signals, with npm as the fallback.
What happens when multiple lockfiles exist?
Without packageManager metadata, it reports the conflict and asks which manager the project uses.
Does it create missing quality scripts?
No. It reports missing scripts instead of inventing commands or adding configuration.
When does it run end-to-end tests?
It runs a defined test:e2e script only when end-to-end behavior changed.
What happens when a check fails or cannot run?
It stops progress through checks and reports the exact command, error, and unverified scope. Failed checks are fixed and rerun.

开发者详情

许可证

Apache-2.0

作者版本

v1.0

Skillstore 修订

r1

版本提示

作者声明的版本不符合 SemVer 规范。

仓库

https://github.com/c3sc0-v4113/scaffold/tree/5ffe59f6f228fd7d3b1b75e99416d090791e374b/skills/project-min-evaluation

引用

019c60817c73e92dfe56b922489013ed933bd5af

维护新鲜度

2026/10/2

使用量

0 次下载 · 0 次浏览

文件结构

📁 references/

📄 script-discovery.md

📄 SKILL.md

c3sc0-v4113 的更多技能

查看全部

相关技能

查看全部