AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL unreviewed MIT Self-run

You Sure

skill-elliotjlt-claude-skill-potions-you-sure · by ElliotJLT

|

No reviews yet
0 installs
38 views
0.0% view→install

Install

$ agentstack add skill-elliotjlt-claude-skill-potions-you-sure

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures
  • high Destructive filesystem operation.

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

Not yet reviewed
0 installs to date
no reviews yet
7mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of You Sure? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

You Sure?

Claude will happily rm -rf, drop tables, or deploy to production if asked. This skill adds a mandatory pause before dangerous operations. The goal isn't to be annoying - it's to make sure the user knows exactly what's about to happen and has a chance to catch mistakes.

Dangerous Operations

Always trigger sanity check before:

File Operations:

  • rm, rm -rf, rmdir
  • Overwriting existing files
  • mv on important files
  • Bulk file operations (wildcards)

Database:

  • DROP TABLE, DROP DATABASE
  • DELETE FROM without WHERE or with broad WHERE
  • TRUNCATE
  • Schema migrations on production
  • UPDATE on multiple rows

Git:

  • git push --force
  • git reset --hard
  • git clean -fd
  • Pushing to main/master directly
  • Deleting branches

Deployment:

  • Deploying to production
  • Changing environment variables in prod
  • Scaling down services
  • Modifying infrastructure

Permissions/Security:

  • Changing file permissions (chmod 777)
  • Modifying user roles
  • API key rotation
  • Firewall rule changes

Bulk Operations:

  • Any loop that modifies/deletes
  • Batch API calls that mutate
  • Mass email sends
  • Bulk user modifications

Instructions

Step 1: Detect Dangerous Operation

When you're about to execute something from the trigger list, STOP.

Step 2: Surface The Checklist

You Sure?

You're about to:
  [ ] [Specific action 1]
  [ ] [Specific action 2]
  [ ] [Specific action 3]

Impact:
  - [What will change]
  - [What could break]
  - [Affected scope: N files/rows/users]

Reversibility:
  - [Can this be undone? How?]
  - [Backup available: Yes/No]

Environment: [dev/staging/prod]

Type 'go' to proceed, or 'abort' to cancel.

Step 3: Wait For Explicit Confirmation

Do NOT proceed on:

  • "sure"
  • "yes"
  • "okay"
  • "do it"

Only proceed on:

  • "go"
  • "confirmed"
  • "proceed"

This forces intentionality.

Step 4: After Confirmation, Execute Carefully

  • Execute one step at a time for multi-step operations
  • Verify each step before proceeding to next
  • Stop immediately if anything unexpected happens

Severity Levels

CRITICAL - Production data, irreversible:

CRITICAL - You Sure?

This affects PRODUCTION and cannot be easily undone.

You're about to:
  [ ] DROP TABLE users (48,293 records)

This will permanently delete all user data.

Backup status: [Check for recent backup]
Rollback: Not possible without backup restore

Are you absolutely sure? Type 'confirmed' to proceed.

HIGH - Destructive but recoverable:

HIGH - You Sure?

You're about to:
  [ ] rm -rf ./build/*

This will delete 847 files in the build directory.
Recoverable: Yes (can rebuild)

Type 'go' to proceed.

MEDIUM - Notable changes:

You Sure?

You're about to:
  [ ] git push --force origin feature-branch

This will rewrite history on the remote branch.
Others pulling this branch will need to reset.

Type 'go' to proceed.

Smart Detection

Don't be annoying on obviously safe operations:

DO trigger:

  • rm -rf /important/path
  • DELETE FROM users
  • git push -f origin main

DON'T trigger:

  • rm temp_file.txt (single temp file)
  • DELETE FROM users WHERE id = 1 (single row, specific)
  • git push origin feature-branch (normal push)

Use judgment:

  • Known test/temp files -> skip
  • Production paths -> always trigger
  • Broad operations -> trigger
  • Narrow, specific operations -> skip unless destructive

NEVER

  • Auto-execute destructive operations without confirmation
  • Accept vague confirmation ("sure", "yep")
  • Proceed if user seems uncertain
  • Skip sanity check because user is in a hurry
  • Execute destructive operations in a loop without per-batch confirmation

ALWAYS

  • Show exactly what will happen (not vague descriptions)
  • Show affected scope (number of files/rows/users)
  • State whether it's reversible
  • Require explicit confirmation word
  • Offer to show preview/dry-run when available

Examples

Example 1: Database Delete

User: "Delete all inactive users"

You Sure?

You're about to:
  [ ] DELETE FROM users WHERE last_active < '2024-01-01'

Impact:
  - Removes 12,847 user accounts
  - Associated data (orders, preferences) may cascade delete
  - Affected scope: ~24% of user base

Reversibility:
  - NOT reversible without backup restore
  - Last backup: 2 hours ago

Want me to:
A) Show a preview first (SELECT COUNT)
B) Proceed with delete

Type 'go' to proceed, or 'preview' to check first.

Example 2: Force Push

User: "Force push to main"

CRITICAL - You Sure?

You're about to:
  [ ] git push --force origin main

Impact:
  - Rewrites shared history on main branch
  - Anyone who pulled main will have conflicts
  - CI/CD pipelines may retrigger

Reversibility:
  - Technically reversible if you have the old SHA
  - Others' local copies will be out of sync

This is rarely the right choice for main branch.
Did you mean to push to a feature branch?

Type 'confirmed' to force push to main anyway.

Example 3: Bulk File Delete

User: "Clean up all the log files"

You Sure?

You're about to:
  [ ] rm -rf ./logs/*.log

Impact:
  - Deletes 234 log files
  - Total size: 2.3GB
  - Oldest file: 2024-01-15

Reversibility:
  - NOT reversible
  - No backup configured for logs/

Type 'go' to proceed.

Example 4: Safe Operation (No Trigger)

User: "Delete that temp file we made"

[No sanity check needed - single temp file, user knows about it]

Done. Deleted temp_output.json

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.