Install
$ agentstack add skill-paranoidandroid2124-sounds-like-a-skill-issue-skill-issue ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Skill Issue
Reduce the skill to the smallest intervention that demonstrably improves its target task.
Assume the model is innocent until the skill proves otherwise.
Inspect
- Read the target
SKILL.mdand every resource it directly routes to. - Identify the target task, supported harnesses, trust boundaries, and
observable completion condition.
- Run
node scripts/audit-skill.mjsfrom this skill
directory when Node.js is available. Treat its findings as leads, not semantic verdicts.
- Establish what the current base model already does without the skill. Do
not infer this from reputation or model version.
Classify
Assign every material instruction one disposition:
- Keep: non-obvious domain facts, exact tool routing, trust or data-loss
boundaries, deterministic operations, output contracts, and observable verification.
- Trim: generic advice, duplicated defaults, repeated warnings, fixed
model or tool assumptions, and process whose cost exceeds the failure risk.
- Delete: instructions with no target capability, conflicts with the
current environment, or no measurable benefit over baseline.
- Measure: plausible value that lacks paired evidence.
Read [references/decision-rubric.md](references/decision-rubric.md) when a classification is disputed or the skill mixes domain knowledge and workflow.
Never trim input validation at trust boundaries, security controls, accessibility basics, error handling that prevents data loss, or an explicit user requirement.
Patch
- Require
nameanddescription. Preserve recognized optional or
harness-specific fields when they carry licensing, compatibility, tool restrictions, security boundaries, or useful metadata. Remove a field only after classifying its behavior and portability cost.
- Put all positive triggers and nearby exclusions in
description. - Keep the body imperative and focused on one job.
- Move conditional detail one level down into
references/; do not
duplicate it in the body.
- Keep scripts only for repeated or deterministic work. Add no dependency
when the standard library suffices.
- Preserve user-authored behavior unless the user asked for an edit. For an
audit-only request, return the patch proposal without changing files.
Verify
- Run the platform's skill validator when available.
- Rerun
audit-skill.mjsand report before/after lines, words, estimated
tokens, resources, and unresolved findings. Include the exact command and counting method; retain the raw report or its path when results will be compared.
- For a material behavioral change, use
$trust-me-browhen available.
Otherwise run the same pinned task once without the skill and once with it, keep contexts isolated, and verify outputs from artifacts rather than self-reports.
- Mark efficacy as unproven until a paired trial supports it.
Return
Lead with keep, trim, delete, or measure. Include:
- the capability the skill uniquely supplies;
- proposed or applied cuts with reasons;
- preserved safety boundaries;
- before/after instruction cost;
- the command, counting convention, and raw artifact behind those numbers;
- validation and trial evidence;
- remaining uncertainty.
Stars, prose length, and the implementer's confidence are not evidence.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: paranoidandroid2124
- Source: paranoidandroid2124/sounds-like-a-skill-issue
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.