Plastic Intent Locking
Inspect, repair, release, or reclaim an intent's delivery lock. Use when a lock-gate deny names /plastic-lock, when resuming interrupted work after a crash, reboot, or /tmp wipe, when a lock reads held or stale, or when the user says "fix the lock", "who holds the lock", or "reclaim the lock".
Install
$ agentstack add skill-zalom-plastic-intent-locking ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-zalom-plastic-intent-locking) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Plastic Lock
Command-only wrapper around ~/.plastic/scripts/plastic-lock. The durable delivery lock is a delivery.lock file in the intent directory: ownership is session-keyed, liveness is a lease (the owner's hooks refresh the file mtime; stale means the heartbeat is older than the TTL). The /tmp bridge is only a cache; the lock file wins every disagreement.
Verbs
Run from the project (the intent resolves from this session's bridge), or pass --intent-dir explicitly:
| Verb | What it does | When | |---|---|---| | status | Report the lock file, bridge cache, freshness, agreement | Always safe; run first | | fix | Idempotent repair: rebuild lock + bridge from disk truth for THIS session. Never touches a fresh foreign lock | Interrupted work, corrupted state, /tmp wiped, legacy pid locks | | release | Owner clears the lock | Ending or abandoning a boarding | | reclaim | Explicit takeover of a STALE lock; appends an audit line to savepoint.md | The owner is gone and the lease expired | | delegate | Owner registers a subagent session under the lock (--delegate ) | Auto-mode orchestration |
ruby ~/.plastic/scripts/plastic-lock status
ruby ~/.plastic/scripts/plastic-lock fix --intent-dir /--
ruby ~/.plastic/scripts/plastic-lock reclaim --intent-dir /--
ruby ~/.plastic/scripts/plastic-lock delegate --delegate Rules
fixexits non-zero when another session holds a FRESH lock: back off, do
not retry in a loop. status shows the owner.
reclaimrefuses a fresh lock. There is no silent reclaim anywhere; every
takeover is audited in the intent's savepoint.md.
- Acquiring a lock for new work is NOT this skill's job: board through
/plastic-intent-starting, which calls the same repair internally.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: zalom
- Source: zalom/plastic
- License: MIT
- Homepage: https://github.com/zalom/plastic
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.