ic1558/skills/scope-lock
skills/scope-lock/SKILL.md
--- name: scope-lock description: Enforce strict task boundaries, prevent scope creep, and block unrelated edits. Use for PR-safe implementation where only declared files/modules are allowed. Mandatory Read: YES --- # Scope Lock Mandatory Read: YES ## Workflow 1. Read declared scope and non-goals. 2. Build a file allowlist before editing. 3. Reject edits outside allowlist with explicit why-not. 4. Verify changed-files set matches scope. ## Caps - Analyze diffs against declared scope. - Enfor
development
Updated Apr 19, 2026
$ install --global
skillsauthnpx skillsauth add ic1558/0luka skills/scope-lockInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 19, 2026, 5:09 AM0.3s1 file scanned
SKILL.md
- name:
- scope-lock
- description:
- Enforce strict task boundaries, prevent scope creep, and block unrelated edits. Use for PR-safe implementation where only declared files/modules are allowed. Mandatory Read: YES
Scope Lock
Mandatory Read: YES
Workflow
- Read declared scope and non-goals.
- Build a file allowlist before editing.
- Reject edits outside allowlist with explicit why-not.
- Verify changed-files set matches scope.
Caps
- Analyze diffs against declared scope.
- Enforce fail-closed on scope violations.
- Produce scope compliance notes.
Forbidden
- Expanding scope without explicit approval.
- Touching unrelated modules.
- Silent edits outside allowlist.
Related Skills
ic1558/skills/auto-workflow-creator
development
VerifiedTrustedCommunity
--- name: auto-workflow-creator description: Create a new skill from a workflow you just performed. Generates a valid 3-layer Anthropic-style skill — YAML frontmatter (name + description + triggers), imperative instruction body, and optional scripts/ subdirectory — and prints the registration commands per target runtime (Claude Code auto-discovers from ~/.claude/skills/; Codex needs an explicit [[skills.config]] entry in ~/.codex/config.toml; OpenCode needs a registry entry in ~/.opencode/openco
SKILL.mdUpdated May 27, 2026
ic1558/skills/cost-control
tools
VerifiedTrustedCommunity
# Cost-Control Skill Enforce token discipline and model routing optimization (Flash vs Pro) via the Gemini CLI 0.40 Gemma local router for governed-agent workflows. ## Guidelines - **Preference for Local/RTK/File Tools:** Always prioritize local tools (ls, read_file, grep_search) and RTK for initial data gathering before calling model logic. - **Flash-First Routing:** - Route all routine code analysis, file reads, summarization, search, and classification tasks to `gemini-3.5-flash-preview` o
SKILL.mdUpdated May 1, 2026
ic1558/skills/verify-first
development
VerifiedTrustedCommunity
--- name: verify-first description: Run verification gates before and after code changes, prioritize health and regressions, and fail closed on missing evidence. Mandatory Read: YES --- # Verify First Mandatory Read: YES ## Workflow 1. Capture baseline verify results. 2. Apply minimal changes. 3. Re-run targeted and system-level verify commands. 4. Report explicit pass/fail evidence. ## Caps - Run deterministic verification commands. - Compare before/after outcomes. - Block claims without pr
SKILL.mdUpdated Apr 19, 2026
ic1558/vera
testing
VerifiedTrustedCommunity
Use this skill when you need to perform a READ-ONLY forensic validation of a completed task (evidence), verify compliance against a TaskSpec, or issue a formal verdict (PASS/FAIL) before GMX approval. Strictly forbids modification or execution.
SKILL.mdUpdated Apr 19, 2026