技能 autopilot
📦
autopilot
內容修訂 r1 低風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數⚡ 包含腳本
Build Complete Software Projects on Autopilot
Complex builds often lose requirements between the brief, implementation, and review. Autopilot tracks each requirement through a structured, delegated delivery workflow.
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "autopilot" from https://skillstore.io/skills/nick-vels-autopilot.md and its manifest at https://skillstore.io/api/skills/nick-vels-autopilot/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「autopilot」。 Build a local appointment application for a small studio with services, available times, and contact details.
預期結果:
- A reviewed local application covering booking, availability, validation, and empty states.
- A requirement manifest showing what was completed, deferred, or left as a placeholder.
- A final report with test results, assumptions, setup steps, and remaining configuration.
正在使用「autopilot」。 Add CSV customer import to the existing product. Reject invalid rows and report partial failures.
預期結果:
- A feature integrated with the existing stack and repository conventions.
- Tests covering valid imports, invalid rows, duplicates, and partial failures.
- Independent acceptance results traced back to the original brief.
正在使用「autopilot」。 Interview me about a delivery marketplace, then build the approved scope.
預期結果:
A structured interview resolves product forks before the skill writes the specification, delegates implementation, reviews each ticket, and reports acceptance.
安全審計
低風險v1 • 2026/8/16 開啟版本化報告
Most static findings are false positives from Markdown formatting, JavaScript template literals, secret-redaction guidance, CSS, and embedded PNG logos. One command risk is confirmed: shutdown trusts a PID from a writable file, and the loopback dashboard server briefly exposes all run artifacts to the local host.
16
已掃描檔案
3,373
分析行數
1
複核項目
0
已忽略的誤報
已確認的安全問題 (1)
低
Loopback Server Exposes Run Artifacts Locally
The preview path serves the entire .autopilot directory, including briefs, manifests, specifications, and tickets. Other same-host users or processes can read these artifacts while the server runs.
The instructions explicitly serve .autopilot and acknowledge that it contains run artifacts. Loopback binding prevents remote access but does not isolate data from the local host.
能力複核項目 (1)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Shell command substitution
[ -f .autopilot/serve.pid ] && kill "$(cut -d' ' -f2 .autopilot/serve.pid)" 2>/dev/null; rm -f .auto
The shutdown command trusts a PID read from a writable project file and sends it a signal without verifying the process identity. A stale or modified serve.pid could terminate an unrelated local process.
風險因素
⚙️ 外部命令 (50)
phases/0-instruments.md:85 phases/0-memory.md:44-45 phases/0-memory.md:45-46 phases/0-memory.md:46-50 phases/0-memory.md:50 phases/0-memory.md:51 phases/0-memory.md:55-57 phases/0-preflight.md:38-44 phases/0-preflight.md:63-65 phases/0-preflight.md:65-66 phases/0-preflight.md:66-67 phases/0-preflight.md:67-68 phases/0-preflight.md:68-71 phases/1-manifest.md:65-75 phases/3-spec.md:147 phases/3-spec.md:153-167 phases/3-spec.md:167-178 phases/4-plan.md:122-148 phases/5-subagents.md:84 phases/5-subagents.md:85 phases/5-subagents.md:86 phases/5-subagents.md:92-96 phases/5-subagents.md:96-97 phases/5-subagents.md:97 phases/5-subagents.md:98 phases/5-subagents.md:102-103 phases/5-subagents.md:103-104 phases/5-subagents.md:115-121 phases/5-subagents.md:192-197 phases/8-final.md:125 phases/8-final.md:126-127 phases/8-final.md:127-128 phases/8-final.md:128 phases/8-final.md:139-141 phases/8-final.md:141-150 phases/8-final.md:150-152 phases/8-final.md:152-171 phases/8-final.md:171-172 phases/8-final.md:172-173 phases/8-final.md:173-174 phases/8-final.md:174-175 phases/8-final.md:175-176 phases/8-final.md:176-177 phases/8-final.md:198 phases/dashboard-template.html:286 phases/dashboard-template.html:287 phases/dashboard-template.html:288 phases/dashboard-template.html:289 phases/dashboard-template.html:290 phases/dashboard-template.html:292
📁 檔案系統存取 (6)
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/nick-vels-autopilot/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/nick-vels-autopilot?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/nick-vels-autopilot?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/nick-vels-autopilot/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/nick-vels-autopilot.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
nick-vels. (2026). autopilot security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/nick-vels-autopilot/audits/1BibTeX 引用
@techreport{nick-vels-nick-vels-autopilot-2026,
author = {nick-vels},
title = {autopilot security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/nick-vels-autopilot/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "autopilot security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "nick-vels"
date-released: "2026-08-16"
url: "https://skillstore.io/skills/nick-vels-autopilot/audits/1"
identifiers:
- type: other
value: "skillstore:nick-vels-autopilot:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Create a Founder Prototype
Turn a clear product idea into a tested local project without requiring the founder to review technical artifacts.
Deliver a Repository Feature
Map an existing feature brief to requirements, interfaces, implementation tickets, tests, and review.
Control an Autonomous Build
Use manual gates for specification and planning while keeping implementation, review, and acceptance delegated.
試試這些提示
Build a Simple Project
Use Autopilot to build [project] for [audience]. It must support [core requirements]. Use the default workflow and keep the result local.
Add a Feature
Use Autopilot in semi mode to add [feature] to this repository. Preserve the existing stack and satisfy [acceptance criteria].
Develop the Brief Deeply
Use Autopilot in interview and deep modes for [product]. Challenge unclear assumptions, ask every important product question, then complete the build.
Run a Controlled High-Fidelity Build
Use Autopilot in manual, strict, and polish modes. Build only [requirements], obtain approval for the specification and tickets, then compare against [reference].
最佳實務
- State the audience, core workflow, constraints, and success conditions in the initial brief.
- Use manual mode when specification or ticket approval is important to project governance.
- Review placeholders, assumptions, environment variable names, and deferred requirements in the final report.
避免
- Do not use Autopilot for a tiny single-file change that needs no specification or delegation.
- Do not place secret values in the brief, repository, prompts, dashboard state, or final report.
- Do not request deployment or other outward actions without an explicit confirmation step.
常見問題
Does Autopilot ask questions?
Semi mode asks only about genuine product forks. Full mode self-briefs, while interview and manual modes ask more questions.
Can I approve the specification before coding starts?
Yes. Manual mode waits for explicit approval of both the specification and the implementation tickets.
Will it deploy or publish the result automatically?
No. Deployment, publishing, payment, external messaging, deletion, and history rewriting require explicit confirmation in every mode.
How does it track progress?
It writes local run state and displays stages, tickets, tests, timings, assumptions, and placeholders in a dashboard.
How are secrets handled?
The workflow records variable names only, redacts pasted values, and instructs the user to configure secrets in an ignored environment file.
What remains after the build?
The repository contains run records, project memory, local commits, test results, and architectural decisions when the project tier requires them.
開發者詳細資訊
作者
nick-vels授權
MIT
Skillstore 修訂
r1
版本提示
作者未聲明版本。
儲存庫
https://github.com/nick-vels/skills/tree/fac0e05a915cb56411facec663eb6dfa063d1571/skills/autopilot引用
fffe9a62369d0b42a0ecc587c533a81177ca4cd8
維護新鮮度
2026/8/16
使用量
0 次下載 · 0 次瀏覽
檔案結構