Install
$ agentstack add skill-xbluesky-cortexes-using-cortex ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Using Cortex — When to Consult the Vault
The cortex vault is the user's own knowledge base: distilled Notes, Projects, Weekly reports, and Raw session records. This skill decides when consulting it is warranted, and hands the actual search to the cortex-query skill.
Retrieval is worth doing when there is a concrete signal that prior context exists. It is not worth doing on speculation — an unprompted search costs the user tokens and latency, and surfacing unrelated notes pollutes the answer.
Search the vault when any of these is true
- Explicit request. The user asks for it: "check cortex", "查一下
cortex", "有沒有記錄過", "do I have notes on this".
- Reference to prior work. The user points at something earlier:
"之前那個", "上次的", "我記得有", "我們討論過", "that ticket", "the project we set up", "continue where we left off".
- Listed topic. The request names a topic that the SessionStart hook
actually listed for this vault. The list is authoritative — match against what it showed, not against a guess about what might exist.
- Resuming a session. The user asks to pick up, continue, or hand off
work from a previous session.
In each case, invoke the cortex-query skill rather than searching the vault directly — that skill knows the retrieval infrastructure, including cortex-vec and its fallbacks.
Do not search the vault when
- The user has not given any of the four signals above. A question being
difficult, technical, or open-ended is not a signal.
- The user picked option 4 ("直接開始工作") from the SessionStart menu,
or skipped the menu. That choice means "do not go to the vault"; honour it for the rest of the session unless the user later asks.
- The user says "don't check cortex", "just answer directly", or similar.
- The task is self-contained: editing code in the current repo, answering
from the current turn, or anything the conversation already supplies.
When in doubt, answer directly. If the answer would have been better with vault context, the user can ask — and signal 1 then applies.
How to apply
- Check the four signals against the user's actual message. If none
matches, proceed without the vault and do not mention it.
- If one matches, invoke
cortex-query. - If results are relevant, ground the answer in them and cite the source
page. If nothing relevant comes back, say so briefly and continue.
Anti-patterns
- ❌ Searching on every message, or at conversation start, "just in case".
- ❌ Treating a hard question as implicit permission to search.
- ❌ Overriding the user's option 4 / "skip the vault" choice.
- ❌ Grepping the vault directly instead of going through
cortex-query. - ❌ Announcing "let me check cortex" when no signal applies.
Why This Skill Exists
The individual cortex skills fire on their own explicit phrases. This skill adds the small set of cases where the user has clearly gestured at prior work without naming a command — so the vault gets consulted when it will actually help, and stays out of the way otherwise.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: XBlueSky
- Source: XBlueSky/cortexes
- License: Apache-2.0
- Homepage: https://cortexes.pages.dev
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.