Install
$ agentstack add skill-mblauberg-provenant-skill-craft ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Skill craft
A skill is a reusable, triggerable procedure, not a solved-task narrative and not a place to park static reference. Every skill earns its slot on four pillars: Trigger (fires on the right requests, stays silent on adjacent ones), Structure (frontmatter contract, progressive disclosure, soft length budgets), Steering (leading words and bright-line rules over repeated emphasis), and Pruning (cutting sediment, duplication, sprawl and no-ops before they ship).
This skill has two branches and defaults to the safer one.
- New or materially revised skill → [references/author.md](references/author.md).
- Assessment of an existing skill, read-only → [references/audit.md](references/audit.md).
- Default with no explicit authoring request: audit. Do not cross
audit → edit without an authority envelope naming implement as action-owner; surface that requirement instead of silently fixing what an audit finds.
Shared doctrine
Both branches follow this without restating it in two voices:
- Three-mode invocation: direct audit; direct authoring under authority;
or composed, where audit is a companion to a primary lifecycle owner (for example implement) that stays the action-owner.
- Budgets: soft ~500-word body per branch file; the standing
catalogue-description lever is governed in MAINTAINING.md; link it, don't restate the number here.
- Token model, three-tier: always-loaded frontmatter, triggered branch
body, one-hop references/ depth. Never nest a second reference level.
- Reuse boundary: global skills express cross-project triggers, procedures
and gates. Convert contextual values into parameters, keep examples synthetic and leave project policy local. Global promotion requires evidence from at least two projects. Use [promotionreadiness.py](scripts/promotionreadiness.py) to integrity-check the local evidence inventory before human review; hashes prove retained content, not its truth or promotion authority. Follow the repository gate in [MAINTAINING.md](../../MAINTAINING.md).
- Trigger fixtures: positive, negative, boundary and composition cases.
A keyword match is a candidate, not ground truth. Changes to routing text re-run the held-out set.
- Failure taxonomy: name the failure, don't just gesture at quality:
premature-completion, duplication, sediment, sprawl, no-op, negation-only.
- Description contract: front-load the first 250 characters with trigger
words and the nearest exclusion; keep boundary-routing negation explicit (name the skill to use instead); never drop it for brevity.
- Provenance: any adaptation from a third-party source records source
URL, version/commit, retrieval date and licence in the repository THIRD_PARTY_NOTICES.md index, with the full licence text under LICENSES/. See [THIRDPARTYNOTICES.md](../../THIRDPARTYNOTICES.md) for this skill's own Skill Optimizer lineage.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: mblauberg
- Source: mblauberg/provenant
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.