技能 engineering-loop

📦

engineering-loop

Name: engineering-loop
Author: phelan164

内容修订 r1 安全 ⚙️ 外部命令

Complete Repository Changes with Verified Evidence

Repository changes can fail when implementation, testing, and review are disconnected. This skill manages a complete local engineering loop with explicit evidence and stop conditions.

支持: Claude Codex Code(CC)

📊 75 合格

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "engineering-loop" from https://skillstore.io/skills/phelan164-engineering-loop.md and its manifest at https://skillstore.io/api/skills/phelan164-engineering-loop/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/phelan164-engineering-loop.md 已签名 manifest GET /api/skills/phelan164-engineering-loop/manifest 已签名 lockfile GET /api/skills/phelan164-engineering-loop/lockfile

测试它

正在使用“engineering-loop”。 Fix the duplicate invoice submission defect and add regression coverage.

预期结果:

Fixed duplicate submission handling in the owning request path.
Added a regression test covering repeated invoice requests.
Focused tests and the required broader checks passed.
Reviewed the final diff; no unresolved consequential findings remain.

正在使用“engineering-loop”。 Add account export with authorization checks and report any blockers.

预期结果:

Implemented authorized account export with explicit ownership validation.
Added success, forbidden, and malformed-request coverage.
Focused validation passed, but the full integration suite requires unavailable infrastructure.
The remaining blocker and exact required service were documented.

正在使用“engineering-loop”。 Investigate an intermittent cache invalidation failure.

预期结果:

Created a bounded reproducer and recorded the distinguishing failure signature.
Tested ranked timing and key-normalization hypotheses independently.
Isolated the cause, added regression coverage, and removed temporary instrumentation.
The original reproduction and affected repository checks passed.

安全审计

安全

v1 • 2026/7/31 打开版本化报告

The two static findings are false positives caused by prose and inline Markdown formatting. The skill defines a bounded local engineering workflow without executable shell logic, prompt injection, or data-exfiltration intent.

已扫描文件

212

分析行数

复核项

已忽略误报

风险因素

⚙️ 外部命令 (1)

SKILL.md:13

最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/phelan164-engineering-loop/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/phelan164-engineering-loop/security.svg)](https://skillstore.io/skills/phelan164-engineering-loop?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/phelan164-engineering-loop?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/phelan164-engineering-loop/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/phelan164-engineering-loop.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

phelan164. (2026). engineering-loop security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/phelan164-engineering-loop/audits/1

BibTeX 引用

@techreport{phelan164-phelan164-engineering-loop-2026,
  author = {phelan164},
  title = {engineering-loop security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/phelan164-engineering-loop/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "engineering-loop security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "phelan164"
date-released: "2026-07-31"
url: "https://skillstore.io/skills/phelan164-engineering-loop/audits/1"
identifiers:
  - type: other
    value: "skillstore:phelan164-engineering-loop:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Implement a Focused Feature

Complete a repository feature from baseline inspection through tests, diff review, and final evidence.

Resolve a Reproducible Defect

Reproduce a defect, add regression coverage, implement a bounded fix, and verify affected behavior.

Coordinate a Cross-Stack Change

Track acceptance criteria, validation levels, contract effects, and blockers across several repository layers.

试试这些提示

Fix a Small Defect

Use the engineering loop to reproduce and fix [defect]. Preserve unrelated changes, run focused tests, review the diff, and report evidence.

Build a Feature

Implement [feature] with these acceptance criteria: [criteria]. Establish the baseline, add appropriate tests, run required checks, and summarize residual risks.

Investigate an Intermittent Failure

Investigate [failure] using a bounded reproducer and ranked hypotheses. Isolate the cause, add regression coverage, implement the smallest fix, and reverify.

Execute a High-Risk Cross-Stack Change

Complete [change] across [layers]. Track contracts, migrations, authorization boundaries, data integrity, validation levels, review findings, and explicit stop conditions.

最佳实践

Define observable acceptance criteria and a safe baseline before changing code.
Run the narrowest relevant check after each bounded change, then complete required broader validation.
Preserve unrelated work and report unrun checks, residual risks, and blockers explicitly.

避免

Do not weaken assertions, remove coverage, or hide errors to make validation pass.
Do not repeat identical failing commands without classifying the failure and revisiting assumptions.
Do not deploy, migrate, merge, publish, or query production without explicit authorization.