Skip to content
Back to skills

Human Only Skills

ASecurity

Name the skills reserved for people to invoke — where the runtime honors disable-model-invocation — and when to reach for each. Triggers: "human-only skills", "which skills must I run myself".

  • 447 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 2, 2026
ai-agentsgotestingapi

Works with

  • api

Security analysis

A100/100

Scanned September 2, 2026

npx -y skills add boshu2/agentops --skill human-only-skills --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Human Only Skills?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Human Only Skills
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/boshu2-human-only-skills-7decbe62/badge)](https://www.skillsdirectory.com/skills/boshu2-human-only-skills-7decbe62)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: human-only-skills
description: 'Name the skills reserved for people to invoke — where the runtime honors disable-model-invocation — and when to reach for each. Triggers: "human-only skills", "which skills must I run myself".'
practices: [design-by-contract]
hexagonal_role: supporting
consumes: []
produces: [stdout]
context_rel: []
skill_api_version: 1
allowed-tools: Read, Grep, Glob
user-invocable: true
context:
  window: inherit
  intent: {mode: none}
metadata:
  capabilities: [human_only_skill_routing]
  effects: []
  canonical_status: canonical
  disposition: keep_specialist
  tier: meta
  dependencies: []
output_contract: a named pointer list; this skill invokes nothing
---

# Human-only skills

Four skills carry `disable-model-invocation: true`. In runtimes that honor
that key, their descriptions stay out of the context window and the model
cannot invoke them — a person types the command. In runtimes without the
switch, the key is stripped at projection time and these remain ordinary
advertised skills (see docs/contracts/codex-skill-api.md); the pointer below
still tells a person which ones to run themselves. This skill **names**
skills. It never invokes one.

## The roster

| Skill | A person reaches for it when |
|---|---|
| `craft-goal` | authoring or linting a persistent goal prompt meant to drive many bounded experiments toward one outcome — a standing artifact a person owns, not this session's intent |
| `learn` | mining a *collection* of durable verdicts for recurring evidence, after the critical path, on purpose |
| `postmortem` | testing one retrospective causal question against verdict evidence that already exists |
| `toil-mining` | mining supplied usage history for repeated operational work worth automating |

What they share: each is off the critical path, each is started deliberately
rather than inferred from a task, and nothing else in the repository reaches
for any of them.

## When a model wants one

Say which skill applies and why, and stop. Reproducing the skill's procedure
by hand defeats the point of removing it from model reach — the command exists
so a person decides the timing.

## Before adding a row

Model invocation is load-bearing whenever anything else reaches for the skill,
so a skill joins this roster only after all four surfaces come back clean, with
the evidence recorded:

1. `ao skills consumers <slug>` and `ao skills graph` — declared `dependencies`
   and `consumes` edges.
2. `workflows/*.js` — a workflow that dispatches the slug.
3. Other skills' `SKILL.md` bodies — a "routes to `<slug>`" sentence or a
   `See Also` entry is a reach.
4. `evals/routing-probes/templates.json` — an `applicable` entry means a probe
   measures whether the *model* routes there, which stripping makes
   unmeasurable rather than merely cheaper.

Retire this skill when the roster is empty.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.