Install
$ agentstack add skill-khaichonggg-prove-before-done-prove-before-done ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Prove Before Done
Require evidence for every material completion claim. Treat "implemented," "tested," "fixed," "published," and "working" as separate claims unless one check directly proves more than one.
Verify the task
- Extract acceptance criteria from the request, specification, issue, or rubric. Do not silently replace them with easier criteria.
- Inspect the actual changed files and current state. Preserve unrelated user changes.
- Create one evidence row per material claim.
- Select the smallest check that directly tests each claim.
- Run safe checks and capture fresh results. Re-check external state when the claim concerns a remote service, publication, message, or deployment.
- Classify each claim as
proven,partially proven,unproven, orblocked. - Report the outcome without upgrading partial evidence into success.
For a local Git repository, run python scripts/collect_repo_evidence.py to capture a read-only snapshot before choosing project-specific build or test commands.
Choose direct evidence
Prefer evidence in this order:
- Current end-to-end behavior or live remote state
- Relevant automated tests or deterministic validation
- Build, type-check, lint, or parser success
- Static inspection of the exact changed code
- Assumptions or prior results
Do not treat a zero exit code as sufficient when success also requires a changed artifact, expected content, correct account, fresh timestamp, or reachable remote result. Read [references/evidence-guide.md](references/evidence-guide.md) when the task has multiple outputs, high impact, or an ambiguous success condition.
Apply safety gates
- Never fabricate, infer, or recycle evidence from an older run.
- Never say a check passed when it was not run.
- Do not run destructive or externally consequential verification unless it is already authorized and necessary.
- Distinguish product failure from unavailable credentials, dependencies, network access, or user input.
- Do not hide failing checks behind a successful unrelated check.
- Do not expose secrets or personal data in logs or final evidence.
Report compactly
Lead with one of these outcomes:
- Verified complete: every material acceptance criterion has direct, fresh evidence.
- Partially verified: implementation exists, but one or more material claims lack direct proof.
- Not verified: evidence contradicts the completion claim.
- Blocked: a named external requirement prevents meaningful verification.
Then list the claim, evidence, and result. Include exact commands only when they help the user reproduce the check.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: khaichonggg
- Source: khaichonggg/prove-before-done
- License: MIT
- Homepage: https://github.com/khaichonggg/prove-before-done/releases/latest
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.