技能 poteto-principles

📦

poteto-principles

Name: poteto-principles
Author: masseater

內容修訂 r1 安全 ⚙️ 外部命令🌐 網路存取

Apply Engineering Principles to Software Changes

Software changes can repeat avoidable design, debugging, and verification mistakes. This skill gives coding assistants explicit engineering principles for making simpler, better-supported decisions.

支援: Claude Codex Code(CC)

📊 75 尚可

Maintain this Skill? Claim it 📊 75 尚可

使用我的智慧代理安裝

將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。

智能體請求

Review the Skillstore skill "poteto-principles" from https://skillstore.io/skills/masseater-poteto-principles.md and its manifest at https://skillstore.io/api/skills/masseater-poteto-principles/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。

Agent 可讀資源

當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。

Markdown 詳情 GET /skills/masseater-poteto-principles.md 已簽名 manifest GET /api/skills/masseater-poteto-principles/manifest 已簽名 lockfile GET /api/skills/masseater-poteto-principles/lockfile

測試它

正在使用「poteto-principles」。 Two fixes changed retry timing, but the same workers still receive most of the load.

預期結果:

Shared assumption: retry timing causes the imbalance.
Next evidence: count work assignments per worker across repeated runs.
If the same workers dominate, inspect assignment rules before changing timing again.
Verify any correction with both per-worker distribution and end-to-end behavior.

正在使用「poteto-principles」。 Review a task model with a completion flag and an optional completion date.

預期結果:

The model permits a completed task without a completion date.
Represent open and completed tasks as distinct variants, with a required date for the completed variant.
Parse external records at the boundary and test both accepted and rejected states.

正在使用「poteto-principles」。 Our API refactor adds an adapter, but all callers are internal.

預期結果:

Confirm that no external users require compatibility.
Inventory internal callers and migrate them in verifiable units.
Remove the old API after caller migration and verify the new observable contract.
Use an adapter only when a specific transition requires it, with an explicit removal condition.

安全審計

安全

v1 • 2026/10/24 開啟版本化報告

All 31 static findings are false positives involving Markdown backticks, software engineering prose, attribution metadata, or readable multilingual text. No evidence found of prompt injection, credential theft, unauthorized network execution, or concealed payloads in the reviewed files. Semantic findings and remediation are empty.

已掃描檔案

382

分析行數

複核項目

已忽略的誤報

風險因素

⚙️ 外部命令 (25)

🌐 網路存取 (1)

SKILL.md:5

最近一次完成的靜態與語意稽核未偵測到已確認的安全發現。這並不能證明該 Skill 沒有副作用。

審計單位: codex

分享與引用此報告

分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。

開啟版本化報告

複製報告連結

https://skillstore.io/skills/masseater-poteto-principles/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/masseater-poteto-principles/security.svg)](https://skillstore.io/skills/masseater-poteto-principles?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/masseater-poteto-principles?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/masseater-poteto-principles/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/masseater-poteto-principles.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

學術引用 (APA · BibTeX · CFF)

APA 引用

masseater. (2026). poteto-principles security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/masseater-poteto-principles/audits/1

BibTeX 引用

@techreport{masseater-masseater-poteto-principles-2026,
  author = {masseater},
  title = {poteto-principles security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/masseater-poteto-principles/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "poteto-principles security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "masseater"
date-released: "2026-10-24"
url: "https://skillstore.io/skills/masseater-poteto-principles/audits/1"
identifiers:
  - type: other
    value: "skillstore:masseater-poteto-principles:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 評分

評分依據證據置信度: 中

架構

可維護性

內容

社群

規範符合度

你可以打造什麼

Diagnose recurring failures

Use reproduction and evidence to identify a shared faulty assumption after repeated fixes fail.

Plan a coordinated API migration

Inventory internal callers, define verification boundaries, and remove the legacy path when compatibility requirements permit.

Review design and test quality

Assess domain models, validation boundaries, reader load, and whether tests assert observable behavior.

試試這些提示

Beginner: Review a small change

Review [change] using poteto-principles. Identify unnecessary complexity, unclear state, and missing verification. Explain your recommendations without editing files.

Intermediate: Diagnose a recurring bug

Investigate [bug] and these failed fixes: [attempts]. Reproduce the failure, identify shared assumptions, and propose the smallest root-cause fix with a behavioral regression test.

Advanced: Plan an API migration

Plan migration from [old API] to [new API]. Inventory callers and compatibility requirements. Define reversible phases, verification boundaries, and conditions for removing the old API.

Expert: Review retry and concurrency safety

Review [workflow] for shared mutable state, retries, and partial failures. Propose isolation or serialization, reconciliation steps, and direct checks for repeated runs and interrupted execution.

最佳實務

Provide the relevant code, observed behavior, constraints, and verification commands before requesting recommendations.
Define compatibility requirements and approval boundaries before planning migrations or autonomous edits.
Keep reproduction steps, direct checks, and measurement evidence with each proposed change.

避免

Applying every principle mechanically without checking project constraints or existing invariants.
Removing validation before confirming that every external input is parsed at the correct boundary.
Treating compilation, mock call counts, or agent reports as proof of correct user-visible behavior.

常見問題

What is poteto-principles?

It is a written collection of engineering principles for design, implementation, debugging, refactoring, migration, verification, and documentation work.

Can I use it with Claude, Codex, and Claude Code?

The marketplace metadata lists all three tools. Actual file access, editing, and verification depend on the capabilities and permissions of your environment.

Does the skill include scripts or an automated checker?

No. It contains Markdown guidance that recommends creating repeatable tools and checks when appropriate.

Is the guidance specific to TypeScript?

No. Most principles are language-independent. The type-system reference includes examples from several languages and points to a separate TypeScript skill.

Does it allow irreversible actions without approval?

No. Its autonomy guidance explicitly requires confirmation for force-pushing, deleting production data, and sending external messages.

Does it include the linked benchmark checklist?

No. The measurement guidance links to a separate benchmark checklist that is not bundled with this skill.