Doctor report: emilkowalski/skills@70744e3

[conikeec]

Public GitHub skill URL

https://github.com/emilkowalski/skills

Analyses requested

• Follow-through analysis (skillspec doctor)
• Security analysis (skillspec boundary)

Notes

Submitted from the public SkillSpec Doctor page.

(re-run: split reports)

[github-actions]

SkillSpec report

Follow-through analysis was not requested for this submission.

Security analysis — what each skill can reach

0 critical · 2 high · 0 medium · 3 low · 3 clean across 8 skill(s).
2 skill(s) reach beyond their own directory and warrant review before install.

Findings to review

HIGH — skills/find-animation-opportunities

• 🔴 agent-directing instruction: the agent may follow this instead of your instructions. — SKILL.md:21

HIGH — skills/improve-animations

• 🔴 hidden content (conceal.zero_width): an instruction or payload a reviewer reading the skill never sees could act on the agent. — PLAN-TEMPLATE.md:19
• 🔴 agent-directing instruction: the agent may follow this instead of your instructions. — SKILL.md:25
• 🟠 agent-directing instruction: an instruction outside the skill's main text could steer the agent. — AUDIT.md:55

Cleared: 3 clean (reach nothing outside their directory); 3 low (touch only their own files).

What to do next

1. Check and decide. Review the findings above, or re-run the analysis yourself:

skillspec boundary assess https://github.com/emilkowalski/skills

2. Install safely through the gate. Assess, then install only on your approval — across harnesses (Claude, Codex, or any AGENTS.md/SKILL.md skills dir):

skillspec pull https://github.com/emilkowalski/skills

3. Guard your harness. Compile a deny-by-default policy from the surface and enforce it on every tool call, so an unreviewed effect is blocked:

skillspec boundary emit <skill> --format skillspec   # least-privilege policy
skillspec boundary guard install                     # managed PreToolUse hook (observe mode)
skillspec boundary guard mode enforce                # deny effects no policy covers

Static analysis only — nothing in the package was executed. See the boundary guide.

Full artifacts: https://github.com/modiqo/skillspec/actions/runs/30386510368/artifacts/8699159739

The artifact contains:

• doctor-report.txt
• doctor-report.md
• doctor-report.html
• doctor-report.json
• shape-gate.md
• shape-gate.json
• source-stage.json
• boundary-assess.txt
• boundary-assess.json
• boundary-report.md
• target.txt

[github-actions]

Security analysis — what each skill can reach

0 critical · 2 high · 0 medium · 3 low · 3 clean across 8 skill(s).
2 skill(s) reach beyond their own directory and warrant review before install.

Findings to review

HIGH — skills/find-animation-opportunities

• 🔴 agent-directing instruction: the agent may follow this instead of your instructions. — SKILL.md:21

HIGH — skills/improve-animations

• 🔴 hidden content (conceal.zero_width): an instruction or payload a reviewer reading the skill never sees could act on the agent. — PLAN-TEMPLATE.md:19
• 🔴 agent-directing instruction: the agent may follow this instead of your instructions. — SKILL.md:25
• 🟠 agent-directing instruction: an instruction outside the skill's main text could steer the agent. — AUDIT.md:55

Cleared: 3 clean (reach nothing outside their directory); 3 low (touch only their own files).

What to do next

1. Check and decide. Review the findings above, or re-run the analysis yourself:

skillspec boundary assess https://github.com/emilkowalski/skills

2. Install safely through the gate. Assess, then install only on your approval — across harnesses (Claude, Codex, or any AGENTS.md/SKILL.md skills dir):

skillspec pull https://github.com/emilkowalski/skills

3. Guard your harness. Compile a deny-by-default policy from the surface and enforce it on every tool call, so an unreviewed effect is blocked:

skillspec boundary emit <skill> --format skillspec   # least-privilege policy
skillspec boundary guard install                     # managed PreToolUse hook (observe mode)
skillspec boundary guard mode enforce                # deny effects no policy covers

Static analysis only — nothing in the package was executed. See the boundary guide.

Full analysis artifacts: https://github.com/modiqo/skillspec/actions/runs/30387486538/artifacts/8699536612

The artifact contains: boundary-report.md, boundary-assess.txt, boundary-assess.json.