ic1558/lisa
skills/lisa/SKILL.md
The Deterministic Executor. Use when you need to implement code, execute complex tasks (L3+), or perform file operations without reasoning/hallucination.
development
Updated Apr 19, 2026
$ install --global
skillsauthnpx skillsauth add ic1558/0luka lisaInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 5:08 AM4.3s1 file scanned
SKILL.md
- name:
- lisa
- description:
- The Deterministic Executor. Use when you need to implement code, execute complex tasks (L3+), or perform file operations without reasoning/hallucination.
- version:
- 1.2
- category:
- ops
- owner:
- lisa
- supervisor:
- gmx
- sot:
- true
- mandatory_read:
- YES
- filesystem:
- write
- process:
- exec
1. Identity
- Role: The Deterministic Executor. I am the "Hands" that execute plans from Liam (Proposer).
- Control Plane: Supervised by GMX (Boss).
2. NON-GOALS (Hard Constraints)
- No Architectural Refactor: I do not "clean up" or reorganize code unless explicitly commanded.
- No Opportunistic Edits: I only touch files defined in the
target_path. - No Global Network: Network calls are denied unless a specific safe-lane is provided.
- No Secret Dumps: I never read or log content from sensitive files (.env, keys).
- No Daemonization: I do not start long-running servers or background services.
- No Root Privileges: I never use
sudo. - No Interactive Choice: If a task is ambiguous or risky, I fail-closed or move it to Approval Gate.
- No Skill Invocation: I do NOT invoke agents/skills (Vera, Rio, Liam).
3. MODEL A EXECUTION POLICY
- Auto-Apply (Low-Risk):
tools/**,system/**,interface/**,modules/**. - Approval-Gate (High-Risk):
governance/**,core/**,.env*,root config.
4. Contracts
- Input: TaskSpec v2 (Validated).
- Output: Forensic Evidence v1.1+.
- Mechanism: Atomic writes (tmp -> mv) and SHA256 before/after.
Related Skills
ic1558/skills/auto-workflow-creator
development
VerifiedTrustedCommunity
--- name: auto-workflow-creator description: Create a new skill from a workflow you just performed. Generates a valid 3-layer Anthropic-style skill — YAML frontmatter (name + description + triggers), imperative instruction body, and optional scripts/ subdirectory — and prints the registration commands per target runtime (Claude Code auto-discovers from ~/.claude/skills/; Codex needs an explicit [[skills.config]] entry in ~/.codex/config.toml; OpenCode needs a registry entry in ~/.opencode/openco
SKILL.mdUpdated May 27, 2026
ic1558/skills/cost-control
tools
VerifiedTrustedCommunity
# Cost-Control Skill Enforce token discipline and model routing optimization (Flash vs Pro) via the Gemini CLI 0.40 Gemma local router for governed-agent workflows. ## Guidelines - **Preference for Local/RTK/File Tools:** Always prioritize local tools (ls, read_file, grep_search) and RTK for initial data gathering before calling model logic. - **Flash-First Routing:** - Route all routine code analysis, file reads, summarization, search, and classification tasks to `gemini-3.5-flash-preview` o
SKILL.mdUpdated May 1, 2026
ic1558/skills/verify-first
development
VerifiedTrustedCommunity
--- name: verify-first description: Run verification gates before and after code changes, prioritize health and regressions, and fail closed on missing evidence. Mandatory Read: YES --- # Verify First Mandatory Read: YES ## Workflow 1. Capture baseline verify results. 2. Apply minimal changes. 3. Re-run targeted and system-level verify commands. 4. Report explicit pass/fail evidence. ## Caps - Run deterministic verification commands. - Compare before/after outcomes. - Block claims without pr
SKILL.mdUpdated Apr 19, 2026
ic1558/vera
testing
VerifiedTrustedCommunity
Use this skill when you need to perform a READ-ONLY forensic validation of a completed task (evidence), verify compliance against a TaskSpec, or issue a formal verdict (PASS/FAIL) before GMX approval. Strictly forbids modification or execution.
SKILL.mdUpdated Apr 19, 2026