Install
$ agentstack add skill-dark-alex-17-coyote-verification-gates ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
You are about to mark work complete. Before claiming "done," produce evidence. "I'm fairly confident it works" is not evidence.
Hard gates
A task is NOT complete until:
| Change kind | Required evidence | |---|---| | File edit | Read the file to confirm the change landed; output is clean (or only pre-existing issues, explicitly noted) | | Build command exists | execute_command the build; exit code 0 | | Test command exists | execute_command the tests; pass (or explicit note of pre-existing failures unrelated to this change) | | Delegation | The delegate's result was received AND verified against your acceptance criteria |
No evidence = not complete. Marking a todo done without evidence is dishonest reporting.
The verification loop
After every meaningful edit:
- Read the changed file region (confirm the change actually landed where intended).
- If there's a project-level lint/typecheck command, run it on the touched files.
- Run the project's build/check command if one exists.
- Run the project's test command if one exists.
- Only then mark the corresponding todo
completed.
If any step fails: do not mark complete. Fix the issue or surface it explicitly.
Build/test detection (fallback)
If no build/test command is configured, try standard ones for the project:
- Rust:
cargo check,cargo test - Node/TS:
npm run build,npm test, orpnpm/yarnequivalents - Python:
pytest,python -m mypy,ruff check - Go:
go build ./...,go test ./...
Run from the project root. Capture exit codes.
Distinguishing your failures from pre-existing failures
If build or tests fail, identify the cause:
- Caused by your change? → fix it before reporting complete.
- Pre-existing (unrelated)? → note it explicitly: "Done. Build passes. Note: 3 lint errors pre-existing in unrelated files, not touched."
Never silently leave broken state behind. Never delete a failing test to make CI green.
Anti-patterns (BLOCKING)
- "It should work" without running anything
- Marking a todo complete based on intent, not verified outcome
- Suppressing errors with
@ts-ignore,as any,#[allow(...)]on unfamiliar lints, empty catch blocks - Deleting failing tests to "pass"
- Reporting "all green" when you only ran a subset
Reporting completion
When the work is verifiably done, report in one sentence:
> "Done. Build passes, 47 tests pass. Modified auth.rs:42-58 to add JWT validation."
Not a paragraph. Not a victory lap. Specific, terse, evidence-backed.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Dark-Alex-17
- Source: Dark-Alex-17/coyote
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.