📦

align

Name: align
Author: hmmhmmhm

内容修订 r1 安全 ⚙️ 外部命令

Align Project Decisions With Your Expectations

Unclear goals and changing priorities can make agent decisions diverge from your expectations. Align captures confirmed criteria in ALIGN.md and reviews meaningful changes against them.

支持: Claude Codex Code(CC)

🥉 78 青铜

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "align" from https://skillstore.io/skills/hmmhmmhm-align.md and its manifest at https://skillstore.io/api/skills/hmmhmmhm-align/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/hmmhmmhm-align.md 已签名 manifest GET /api/skills/hmmhmmhm-align/manifest 已签名 lockfile GET /api/skills/hmmhmmhm-align/lockfile

测试它

正在使用“align”。 Align my appointment-booking project. Prioritize mobile access and keep payments out of the first release.

预期结果:

Draft purpose: Let customers book available appointment slots from a phone.
Priority: Mobile usability takes precedence over optional desktop enhancements.
Exclusion: Payment processing is outside the first release.
Open question: What booking completion rate will define success?
Confirmation status: Not yet confirmed; no agreement has been saved.

正在使用“align”。 Review a payment feature against our confirmed agreement, which excludes payments from the first release.

预期结果:

Meaningful drift: The payment feature conflicts with the confirmed first-release exclusion.
Proposed decision: Defer payment work unless you explicitly change the release scope.
The current agreement and full-confirmation timestamp remain unchanged.

正在使用“align”。 I authorize changing the launch platform from desktop to mobile. Keep all other agreement criteria.

预期结果:

Updated ALIGN.md: Launch platform is now mobile; unrelated criteria remain unchanged.
Recorded partial confirmation on the launch-platform criterion.
The full-alignment timestamp remains unchanged because this was not a full reconfirmation.

安全审计

安全

v1 • 2026/10/12 打开版本化报告

All 14 static findings are false positives: Markdown formatting, a read-only Git check, and duplicate-section guidance. No evidence found of prompt injection, credential access, data exfiltration, or malicious execution. The skill requires authorized agreement changes, preserves existing instructions, and prohibits silent hooks or global configuration changes.

已扫描文件

153

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (13)

SKILL.md:10 SKILL.md:17 SKILL.md:21 SKILL.md:59 SKILL.md:79 SKILL.md:80 SKILL.md:89 SKILL.md:94 SKILL.md:95 SKILL.md:98 SKILL.md:100 SKILL.md:111 SKILL.md:117

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/hmmhmmhm-align/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/hmmhmmhm-align/security.svg)](https://skillstore.io/skills/hmmhmmhm-align?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/hmmhmmhm-align?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/hmmhmmhm-align/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/hmmhmmhm-align.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

hmmhmmhm. (2026). align security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/hmmhmmhm-align/audits/1

BibTeX 引用

@techreport{hmmhmmhm-hmmhmmhm-align-2026,
  author = {hmmhmmhm},
  title = {align security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/hmmhmmhm-align/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "align security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "hmmhmmhm"
date-released: "2026-10-12"
url: "https://skillstore.io/skills/hmmhmmhm-align/audits/1"
identifiers:
  - type: other
    value: "skillstore:hmmhmmhm-align:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Define a New Project

Clarify intended users, success criteria, priorities, and exclusions before an agent makes implementation decisions.

Review Development Drift

Compare relevant implementation changes with an existing agreement and propose revisions only when new evidence matters.

Clarify Writing Priorities

Record audience, quality expectations, constraints, and autonomy boundaries for an ongoing writing project.

试试这些提示

Start an Agreement

Use align to clarify goals for [project]. Ask about the most important gaps, then show a concise draft for my review.

Align an Existing Project

Use align for [project]. Review relevant documentation and summarize the current direction. Ask what I want to retain or change before drafting ALIGN.md.

Review Possible Drift

Use align to compare [recent changes] with our existing ALIGN.md. Use available history, disclose gaps, and propose revisions only for meaningful inconsistencies.

Update a Specific Criterion

Use align to update [criterion] to [new requirement]; I authorize this lasting change. Preserve unrelated criteria and the full-confirmation timestamp. Record this partial confirmation.

最佳实践

Identify the target project and provide existing agreements, relevant documentation, and available history.
State concrete priorities, exclusions, and autonomy boundaries when important values conflict.
Confirm lasting changes explicitly and distinguish partial updates from full agreement confirmation.

避免

Treating implementation choices or inferred preferences as confirmed user requirements.
Repeating a full interview when routine work already fits the current agreement.
Advancing the full-confirmation timestamp after automatic review or a partial change.

常见问题

What does align produce?

It drafts or updates a concise ALIGN.md agreement covering goals, success criteria, scope, priorities, constraints, and relevant unresolved matters.

Which AI tools are listed as supported?

The skill lists Claude, Codex, and Claude Code. Actual instruction loading depends on the target agent and its project configuration.

Does the project need Git?

No. Git history helps review changes, but the skill must disclose missing history and must not initialize Git without a request.

When does the skill save an agreement?

It saves after you confirm the draft or clearly authorize the particular lasting changes. Explicit delegation may authorize saving an unconfirmed draft.

Will every future agent enforce ALIGN.md automatically?

No. The skill adds a project instruction reference, but agent compatibility varies. It prohibits silent hook installation and global setting changes.

How are partial confirmations recorded?

Only affected criteria receive updated confirmation times. The full-alignment timestamp changes only when you confirm the complete agreement.