mirror of
https://github.com/addyosmani/agent-skills.git
synced 2026-08-12 18:07:26 +02:00
Folds in the safety and consistency findings surfaced by running the skill against itself in two cycles (single-model adversarial review + cross-model verification via Codex). Cross-model escalation is now offered in every interactive cycle, and the CLI invocation path uses a read-only sandbox with prompts piped through stdin to neutralize shell-escaping and prompt-injection risks (verified against Codex 0.128.0 and Gemini 0.41.2 locally). Internal consistency fixes from the adversarial self-review: the adversarial prompt explicitly overrides persona templates; the persona roster is referenced rather than duplicated; the Step 2 'Claim' bullet is renamed Assertion to disambiguate from the Step 1 CLAIM block; the manual fallback in Loading Constraints is labeled as a degraded last-resort path; the forward reference to Step 3 is anchored; the Verification checklist no longer contains an item not derivable from the Process; and using-agent-skills's Lifecycle Sequence now includes the skill at position 7.