Skip to content
Back to skills

Runs

ASecurity

Date: 2026-07-11 Run: treatment with the skill. | # | Assertion | Result | Evidence | | --- | --- | --- | --- | | 1 | One material R5 finding | PASS | The output reports one material R5 finding for EU uploads. | | 2 | Attach the finding to both statements | PASS | The location and quotation cover lines 5–6 together. | | 3 | Present both precedence policies | PASS | EU-wins and global-wins rewrites are both present. | | 4 | Do not silently select specific-over-general | PASS | The summary requ...

  • 3 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 3, 2026
ai-agents

Security analysis

A100/100

Pro scans all 20 files and shows the line behind each finding

Scanned September 3, 2026

npx -y skills add briandconnelly/codex-in-claude --skill runs --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Runs?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Runs
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/briandconnelly-runs-3a2ad4da/badge)](https://www.skillsdirectory.com/skills/briandconnelly-runs-3a2ad4da)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# Scenario 8 — With-Skill Scoring

Date: 2026-07-11
Run: treatment with the skill.

| # | Assertion | Result | Evidence |
| --- | --- | --- | --- |
| 1 | One material R5 finding | PASS | The output reports one material R5 finding for EU uploads. |
| 2 | Attach the finding to both statements | PASS | The location and quotation cover lines 5–6 together. |
| 3 | Present both precedence policies | PASS | EU-wins and global-wins rewrites are both present. |
| 4 | Do not silently select specific-over-general | PASS | The summary requires an author decision before a definitive rewrite. |

Total: 4/4.

## Scored Output

## Findings

### 1. Missing precedence for EU uploads

- **Rule id:** R5 Reachable precedence
- **Location:** `## Rules`, both list items
- **Quoted text:** “Always use the global endpoint for uploads.” / “For EU customer uploads, use the EU endpoint.”
- **Why it fails:** An EU customer upload satisfies both rules, but the rules prescribe different endpoints and do not state which one takes precedence.
- **Severity:** Material
- **Suggested rewrite:** Author decision required.
  - **EU rule takes precedence:** “Use the global endpoint for all uploads except EU customer uploads.
    For EU customer uploads, use the EU endpoint.”
  - **Global rule takes precedence:** “Use the global endpoint for every upload, including EU customer uploads.”
  - **If the endpoints are not actually alternatives:** Define their distinct roles or selection conditions so that an EU upload cannot trigger incompatible endpoint choices.

## Summary

- **R1:** 0
- **R2:** 0
- **R3:** 0
- **R4:** 0
- **R5:** 1
- **Material:** 1
- **Minor:** 0

The binding rules are clearly separated, mandatory, atomic, and verifiable, but their overlap leaves endpoint selection undefined for EU customer uploads.

Files in this skill

  • 2026-07-11-scenario1-baseline.md2.7 KB
  • 2026-07-11-scenario1-with-skill.md3.5 KB
  • 2026-07-11-scenario2-baseline.md2.5 KB
  • 2026-07-11-scenario2-with-skill.md1.2 KB
  • 2026-07-11-scenario3-baseline.md1.8 KB
  • 2026-07-11-scenario3-with-skill.md2.1 KB
  • 2026-07-11-scenario4-baseline.md1.6 KB
  • 2026-07-11-scenario4-with-skill.md1.4 KB
  • 2026-07-11-scenario5-baseline.md1.5 KB
  • 2026-07-11-scenario5-with-skill.md1004 B
  • 2026-07-11-scenario6-baseline.md1.6 KB
  • 2026-07-11-scenario6-with-skill.md2.7 KB
  • 2026-07-11-scenario7-baseline.md1.4 KB
  • 2026-07-11-scenario7-with-skill.md1.7 KB
  • 2026-07-11-scenario8-baseline.md1 KB
  • 2026-07-11-scenario8-with-skill.md1.8 KB
  • 2026-07-11-scenario9-trigger.md695 B
  • 2026-08-06-scenario1-with-skill.md13.2 KB
  • 2026-08-06-scenario6-with-skill.md6.8 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.