2233admin/salacia-init
skills/salacia-init/SKILL.md
Initialize Salacia scope contract for the current task. Use when starting a new coding task to define which files the agent is allowed to modify. Triggers on: 'salacia init', 'scope contract', 'init salacia', 'guard scope'.
$ install --global
skillsauthnpx skillsauth add 2233admin/salacia-guard salacia-initInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
4 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
4
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 25, 2026, 5:14 AM79.8s1 file scanned
SKILL.md
- name:
- salacia-init
- description:
- Initialize Salacia scope contract for the current task. Use when starting a new coding task to define which files the agent is allowed to modify. Triggers on: 'salacia init', 'scope contract', 'init salacia', 'guard scope'.
- user-invocable:
- true
Salacia Init
Generate a scope contract for the current task.
What to do
-
Ask the user what task they're working on (or read from git branch name / recent context)
-
Analyze the task description to extract:
- Keywords → map to file paths (use project structure)
- Quoted file paths in the description
- Conventional commit prefix (feat/fix/docs/chore) → scope width
-
Check
.salacia/memory.jsonfor historical patterns. If it exists, read the pattern matching the detected task type (feat/fix/etc.). Pre-fillsoftAllowedPathswith entries whereweight >= 0.5. This lets the contract benefit from past session learning. -
Generate
.salacia/contract.json:
{
"taskId": "<from branch or user input>",
"allowedPaths": ["<extracted paths>"],
"softAllowedPaths": ["<sibling dirs, co-change companions>"],
"excludedPaths": ["node_modules/**", ".git/**", "dist/**"],
"protectedPaths": [".env", ".env.*", "*.pem", "*.key", "*.cert", "package-lock.json", "bun.lockb"],
"maxFilesChanged": 10,
"generatedAt": "<timestamp>",
"generatedBy": "heuristic"
}
- Also create
.salacia/config.jsonif it doesn't exist:
{
"enabled": true,
"driftThreshold": 30
}
- Reset
.salacia/drift.jsonto zero state:
{
"score": 0,
"files": [],
"softFiles": [],
"outOfScope": [],
"protected": []
}
- Report the contract summary to the user (include any memory-derived soft paths)
Scope width heuristics
- fix: narrow — only files mentioned + their test files
- feat: medium — mentioned files + sibling directory + tests
- refactor: wide — entire package the files belong to
- docs: docs/** + README.md only
- chore: wide — config files + root files allowed
Notes
- Contract is stored in
.salacia/(gitignored) - The guard hook (PreToolUse/PostToolUse) reads this contract automatically
- Zero token cost for enforcement — hooks run as shell commands
- To disable: set
enabled: falsein.salacia/config.json
Related Skills
2233admin/salacia-status
testing
VerifiedTrustedCommunity
Show current Salacia scope contract and drift status. Use when checking what files are in scope, current drift score, or reviewing the contract. Triggers on: 'salacia status', 'scope status', 'drift status', 'guard status'.
1SKILL.mdUpdated Mar 25, 2026
2233admin/salacia-stats
testing
VerifiedTrustedCommunity
Show Salacia audit statistics — event counts, top drifted files, learned promotions. Triggers on: 'salacia stats', 'scope stats', 'drift stats', 'guard stats', 'salacia report'.
1SKILL.mdUpdated Mar 25, 2026
2233admin/salacia-gc
testing
VerifiedTrustedCommunity
Run Salacia garbage collection — analyze drift patterns, rotate audit logs, merge learned patterns into memory. Use when: 'salacia gc', 'clean salacia', 'salacia refine', 'optimize scope', 'salacia learn'.
1SKILL.mdUpdated Mar 25, 2026
steipete/skill-creator
testing
VerifiedTrustedCommunity
Create, edit, improve, or audit AgentSkills. Use when creating a new skill from scratch or when asked to improve, review, audit, tidy up, or clean up an existing skill or SKILL.md file. Also use when editing or restructuring a skill directory (moving files to references/ or scripts/, removing stale content, validating against the AgentSkills spec). Triggers on phrases like "create a skill", "author a skill", "tidy up a skill", "improve this skill", "review the skill", "clean up the skill", "audit the skill".
356,423SKILL.mdUpdated Apr 13, 2026