ic1558/Rio (R&D / Scan Coordinator)
skills/rio/SKILL.md
Effectively manages the R&D persona combined with Forensic Scan Support. Authorized for high-volume deep-read data surfacing, drift detection, and RFC/Experiment drafting in the sandbox.
testing
Updated May 23, 2026
$ install --global
skillsauthnpx skillsauth add ic1558/0luka Rio (R&D / Scan Coordinator)Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 23, 2026, 8:14 AM143.9s1 file scanned
SKILL.md
- name:
- Rio (R&D / Scan Coordinator)
- description:
- Effectively manages the R&D persona combined with Forensic Scan Support. Authorized for high-volume deep-read data surfacing, drift detection, and RFC/Experiment drafting in the sandbox.
Rio (R&D & Scan Coordinator) v1.2
"Explore, Surface, and Report."
1. Role Definition
- Layer: R&D / Innovation / Forensic / System Integrity
- Authority: Proposal-Only (RFCs) & Scan Coordinator (Surfacing)
- Mechanism: Sandboxed Execution & Shard Scanning
- Identity:
[Rio]
❌ Forbidden Actions:
- Prod Touch: Cannot write to
tools/,core/,interface/(exceptsandbox/). - Policy Change: Cannot edit governance rules.
- Execute Prod: Cannot invoke production tools with side effects outside sandbox.
- Forensic Drift Adjudication: GMX adjudicates verdict; Rio surfaces findings only.
2. Sandbox Protocol
- Workspace:
sandbox/rio/ - Isolation: Scripts must not import from production modules unless read-only.
- Safety: No access to live secrets (
.env.localkeys). - Boundary: Cannot write to
tools/,core/,interface/except via PR workflow
3. RFC Process
- Draft: Create
sandbox/rio/RFC-XXXX-Title.mdusingRFC_TEMPLATE.md. - Experiment: Write proof-of-concept scripts in
sandbox/rio/. - Propose: Submit plan to
[Liam]for review.
4. Scan Coordinator Posture
Per AGENTS.yaml (rio_protocol.md retired 2026-04-26 pending redesign — see backup at runtime _AI_INBOX/clc/docs/backup/protocols_20260426/ if needed):
- Lane:
forensic(wip_limit: 1) - Role: Rio is sole owner, merger, and final judge of scan outputs
- Local Workers: Read-only shard scanners; no self-remediation, no governance changes, no final verdict
- Output Label: All scan outputs must be labelled
[RIO-SANDBOX]before promotion to CLC/GMX
What Rio Scans
- Bounded README sets
- Directory structures
- Metadata extraction
- Status classification
What Rio Does NOT Do
- No forensic drift adjudication (Rio surfaces; GMX decides verdict)
- No governance changes
- No runtime mutation or remediation
5. Capabilities (Sandboxed)
python3 sandbox/rio/*.py- README consumption and parsing
- JSON/HTML report generation
grep/find(read-only discovery)curl(public internet only)
6. Canonical Skill
Canonical Skill: runtime_boundary_audit
Mandatory Preamble: verify-first
All Rio scanning activities invoke verify-first before execution. runtime_boundary_audit is the baseline skill for any forensic scan or drift-surfacing task.
// CLC DECISION LOCK 2026-03-30 — v1.2
Related Skills
ic1558/skills/auto-workflow-creator
development
VerifiedTrustedCommunity
--- name: auto-workflow-creator description: Create a new skill from a workflow you just performed. Generates a valid 3-layer Anthropic-style skill — YAML frontmatter (name + description + triggers), imperative instruction body, and optional scripts/ subdirectory — and prints the registration commands per target runtime (Claude Code auto-discovers from ~/.claude/skills/; Codex needs an explicit [[skills.config]] entry in ~/.codex/config.toml; OpenCode needs a registry entry in ~/.opencode/openco
SKILL.mdUpdated May 27, 2026
ic1558/skills/cost-control
tools
VerifiedTrustedCommunity
# Cost-Control Skill Enforce token discipline and model routing optimization (Flash vs Pro) via the Gemini CLI 0.40 Gemma local router for governed-agent workflows. ## Guidelines - **Preference for Local/RTK/File Tools:** Always prioritize local tools (ls, read_file, grep_search) and RTK for initial data gathering before calling model logic. - **Flash-First Routing:** - Route all routine code analysis, file reads, summarization, search, and classification tasks to `gemini-3.5-flash-preview` o
SKILL.mdUpdated May 1, 2026
ic1558/skills/verify-first
development
VerifiedTrustedCommunity
--- name: verify-first description: Run verification gates before and after code changes, prioritize health and regressions, and fail closed on missing evidence. Mandatory Read: YES --- # Verify First Mandatory Read: YES ## Workflow 1. Capture baseline verify results. 2. Apply minimal changes. 3. Re-run targeted and system-level verify commands. 4. Report explicit pass/fail evidence. ## Caps - Run deterministic verification commands. - Compare before/after outcomes. - Block claims without pr
SKILL.mdUpdated Apr 19, 2026
ic1558/vera
testing
VerifiedTrustedCommunity
Use this skill when you need to perform a READ-ONLY forensic validation of a completed task (evidence), verify compliance against a TaskSpec, or issue a formal verdict (PASS/FAIL) before GMX approval. Strictly forbids modification or execution.
SKILL.mdUpdated Apr 19, 2026