Skip to content
Back to skills

Verification

ASecurity

| AC | Claim | Status | |---|---|---| | AC-1 | SKILL.md with frontmatter + four-slot table | MET | | AC-2 | Tier 1 mechanical: freshness refusal + both-directions cross-check | MET (live run below) | | AC-3 | Tier 2 delta-only subagent, no delta = no dispatch | MET (stated; live run had zero delta, zero dispatch) | | AC-4 | PR-gated apply | MET (this PR is the gate) | | AC-5 | README table + header count, audit-loop Known instances | MET | | AC-6 | BACKLOG: ID-458 shipped row + ID-407 registry-s

  • 10 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 13, 2026
developmentbash

Security analysis

A100/100

Pro scans all 21 files and shows the line behind each finding

Scanned September 13, 2026

npx -y skills add dwarvesf/dwarves-kit --skill verification --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Verification?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Verification
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/dwarvesf-verification-dwarves-kit/badge)](https://www.skillsdirectory.com/skills/dwarvesf-verification-dwarves-kit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
# Proof of done: feature-map-skill (SPEC-218)

## Acceptance criteria

| AC | Claim | Status |
|---|---|---|
| AC-1 | SKILL.md with frontmatter + four-slot table | MET |
| AC-2 | Tier 1 mechanical: freshness refusal + both-directions cross-check | MET (live run below) |
| AC-3 | Tier 2 delta-only subagent, no delta = no dispatch | MET (stated; live run had zero delta, zero dispatch) |
| AC-4 | PR-gated apply | MET (this PR is the gate) |
| AC-5 | README table + header count, audit-loop Known instances | MET |
| AC-6 | BACKLOG: ID-458 shipped row + ID-407 registry-source note | MET |
| AC-7 | real Tier-1 run green + negative control RED | MET (runs 2 and 3) |

## Confirmation runs

| # | Check | Command | Result |
|---|---|---|---|
| 1 | freshness gate exercised for real | `bash lib/registry/feature-registry.sh generate /tmp/feat-check.md; cmp` | STALE on branch start (concurrent #322 drift), regenerated + committed, then clean |
| 2 | Tier-1 cross-check, live estate, green run | the skill's step 3 recipes, all four kinds, both directions | zero mismatches; counts 34 commands, 26 agents, 8 skills, 25 hooks on each side (the 8th skill is feature-map itself, see Run detail) |
| 3 | negative control | remove the `/kit:wayfind` line from a COPY of workflow-paths.md, re-extract, `comm -23` | `wayfind` surfaces as only-in-FEATURES (RED), real file untouched |
| 4 | registration pins | `bash tests/test-meta.sh` | green; README skills header/table pins pick up the 8th skill (output in Run detail) |

## Run detail

Run 2 is the green run required by AC-7: presence parity holds across the whole live estate, so Tier 2 dispatched nothing (the delta-only rule exercised on the zero case). One secondary finding, listed not fixed, per the skill's UNSURE rule: `skill-review` trigger class is `[I]` by frontmatter (`disable-model-invocation: false`) but `[H]` in the hand-derived path index; operator call.

Run 3 is the injected-defect control: deleting one index line makes exactly that feature name surface in the only-in-FEATURES column. The mutation was made on `/tmp/w-mutated.md`, never on the tracked file.

Run 1 is incidental but load-bearing: the staleness refusal fired on genuine drift (concurrent merge #322) before this skill's first commit, proving the refusal path against reality rather than a fixture.

Review round exercised the loop a second time: the initial ship candidate registered feature-map in FEATURES.md but NOT in the path index, so the skill's own Tier 1 (re-run by the reviewer) flagged feature-map itself as the one delta (7 vs 8 skills). Fixed by adding its three workflow-paths.md lines (section 2 estate cadence, section 3 learn-side skills, section 5 index) exactly as the skill's Tier 2 prescribes for a new feature; the run table above records the post-fix state.

## Reproduce

```
bash lib/registry/feature-registry.sh generate /tmp/f.md && cmp /tmp/f.md docs/FEATURES.md
# then the step 3 recipe block in skills/feature-map/SKILL.md
grep -v '/kit:wayfind' docs/workflow-paths.md > /tmp/w-mutated.md   # NC input
bash tests/test-meta.sh
```

Files in this skill

  • COUNTS.md615 B
  • README.md20.7 KB
  • SPEC-184-stable-interface/proof-of-done.md3.6 KB
  • activate.md1.8 KB
  • advisor-visibility.md10.6 KB
  • advisor.md3.7 KB
  • agent-effectiveness.md4.5 KB
  • agents-commands-scattered-ids.md3.7 KB
  • agents-md-lib-path-fallback.md1.6 KB
  • audit-scanner-agent.md2.9 KB
  • auto-format-rustup.md4.2 KB
  • backfill-loop-engineering.md3.4 KB
  • backfill-memory-tidy.md3 KB
  • backfill-research-arch.md4.3 KB
  • backfill-research-pair.md6.5 KB
  • backfill-tool-policy-guard.md6.7 KB
  • backlog-reconcile.md7.3 KB
  • backlog-sweep.md4.2 KB
  • backlog-sync-untrusted-marking.md2.9 KB
  • bare-remote-default-branch.md2.9 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.