Install
$ agentstack add skill-sanexxxx777-curated-claude-code-goal ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
/goal — autonomous goal loop
You prompt yourself a proactive executor: state a GOAL plus how to verify it, and the agent runs check→fix→check on its own, returning ONLY with the finished result. Frees you from sitting at the monitor nudging every step.
This instruments four principles (think before code · simplicity · surgical edits · drive through a verifiable target) into a reusable loop. Not a replacement for a heavy decomposing orchestrator — /goal is for ONE mid-sized goal. The design phase (goal / verification / control rubrics) is cherry-picked from Looper (ksimback) — the framework wasn't installed, the techniques were.
When to use
- A clear goal with a verifiable done-criterion: a bug (test reproduces → green), research (facts verified), content (critic ≥ threshold), audit (findings adversarially checked), refactor (tests + lint green).
- NOT for: trivial work (just do it), pure discussion, and ⚠️ NOT for irreversible/production mutations without confirmation (see guards).
Goal template (fill in BEFORE starting — design phase, don't skip)
Goal:
Sharpness test: what counts as "done" if two competent agents disagreed? Subjective → measurable proxy.
Scope: included / excluded / max depth
Context:
Checks (typed, programmatic FIRST — see "Verification"):
- [programmatic]
- [judge]
- [human]
Done-criterion:
Budget (whichever hits first = STOP): cycles N=3-5 · time · tokens
Verification — types (programmatic → judge → human)
- programmatic (preferred WHENEVER possible): a command returns pass/fail — test/build/lint/schema/grep/script. Deterministic goes FIRST.
- judge (semantics code can't cheaply check — content/research/design quality): scored against a SPECIFIC rubric (measurable dimensions, not "high quality"). ⚠️ the agent does NOT judge its own semantics (a host grading its own work tends to declare it done = the failure mode of naive autonomy) → a DIFFERENT pass / different model judges. Verdict as strict JSON:
{verdict: pass|revise, blocking_issues: […], confidence}; if it doesn't parse → treat asrevise. - human: taste / business judgment / private knowledge / legal risk / money — the user signs off (= the mutation guard, the loop does not bypass it).
- Anti-patterns: "no errors" as the only criterion; all judge/human when a programmatic check exists; a rubric with no dimensions; a judge given hidden context it never received.
Loop rules
- Reproduce/understand BEFORE editing — find root cause, don't patch blindly (blind patching burns context).
- Minimal surgical edit — only what moves toward the goal.
- Run REAL checks — commands/script/run, not "looks right".
- Failed → read logs, fix, retry. Don't stop after the first failure.
- Don't ask while you can move yourself — but don't invent missing facts (unknown API/version → look it up, don't guess).
- STOP only when: external access/secret/confirmation of a production mutation is needed, OR ≥N failed cycles on the same error (anti-stall), OR no-progress (M cycles with no metric/artifact advance even if errors differ — spinning burns context), OR budget (time/tokens) exhausted → escalate.
⚠️ Guards (the difference from "just autonomous" when real money/irreversible actions are in play)
- Production/irreversible mutation = ALWAYS confirm; the loop does not bypass it: process restart, order, deploy, rm, git push, kill — the loop reaches the mutation point and STOPS for confirmation. Read-only/code/backtest/content cycle freely.
- Result honesty = blocking gate: NEVER fake a "green" — real runs, not mocks; no faked test/result. Can't reach it → STOP + escalate, NOT fake.
- Back up BEFORE editing + verify AFTER by checking (not on faith): no "it works" without a live run; positive evidence (the feature fired in logs); "no errors" ≠ working.
- Numeric stop-criterion — ≥3-5 cycles on the same error/file = STOP, don't force it.
- Durable trail for a long loop —
run-log.md(each step/decision/check result/blocker) +state.json(latest state): survives a context compaction / session break, resume at a gate boundary, not from scratch. Optional for short loops. - Side-effect after restart = idempotency/duplicate-check — an effectful action (order/deploy/notification/write) must not duplicate when the loop restarts. Before repeating an action, check whether it already happened.
Final report (only when the goal is reached OR on STOP)
- Root cause briefly (what was actually wrong, not the symptom).
- Diff summary — what changed and why (each edit ← from the goal).
- The real check commands and their RESULT (the output, not "passed").
- If STOP — what blocks it + what's already done + what's needed from the user.
Anti-actions
- ❌ Don't bypass confirmation of a production mutation "because it's autonomous mode".
- ❌ Don't fake check results to exit the loop.
- ❌ Don't patch blindly without root cause (≥3 blind = STOP).
- ❌ Don't grind >N cycles on the same error — it burns context, escalate.
- ❌ Don't return "seems done" without checks actually run.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Sanexxxx777
- Source: Sanexxxx777/curated-claude-code
- License: MIT
- Homepage: https://shulgin.is-a.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.