Skip to content
Back to skills

Review

ASecurity

Review pending capsule drafts one-by-one — scan for PII, then push, skip, or delete each draft.

  • 2 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added May 26, 2026
code-qualitynode

Security analysis

A100/100

Scanned May 27, 2026

npx -y skills add fragcap/plugin --skill review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Review
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/fragcap-review/badge)](https://www.skillsdirectory.com/skills/fragcap-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: review
description: Review pending capsule drafts one-by-one — scan for PII, then push, skip, or delete each draft.
---

# Review Capsule Drafts

Guide the user through reviewing locally saved capsule drafts (SKILL.md files).

## Script Convention

    FRAGCAP_DATA="${CLAUDE_PLUGIN_DATA}" node "${CLAUDE_PLUGIN_ROOT}/scripts/<n>.mjs" [args]

If a script exits with a non-zero code or returns `{ error: "..." }`, **stop immediately and surface the error to the user**. Never silently retry with a different command or skip the step.

## When to Activate

- User runs `/fragcap:review`
- SessionStart hook reports pending drafts
- User asks about their recent explorations

## Flow

1. **Auth gate** — run `auth-status.mjs`. Not authenticated → tell user to run `/fragcap:auth` and stop.

2. **List drafts** — run `list-drafts.mjs`.
   - Empty: "No pending drafts." Stop.
   - Has drafts: show a numbered summary with ID, problem, tags, and status.

3. **Review each draft** — process one at a time:

   a. **PII scan** — run `preview-pii.mjs <draft-id>`. Display findings if any. If clean: "No PII detected."

   b. **Ask for decision** — present numbered options inline, do not ask the user to type free text:
   ```
   [1] Push  [2] Skip  [3] Delete
   ```
   - **1 Push** — present visibility options:
     ```
     [1] anonymous (default)  [2] attributed
     ```
     Then present gist scope options:
     ```
     [1] public (default) — searchable by others, registered in central index
     [2] secret — unlisted, not registered in index
     ```
     Then run `push.mjs <draft-id> <visibility> <scope>` where scope is `public` or `secret`.
   - **2 Skip** — keep the draft for later, move to next
   - **3 Delete** — run `delete-draft.mjs <draft-id>` to permanently remove

4. **Summary** — after all drafts are processed:
   ```
   Done! Pushed: 2 | Skipped: 1 | Deleted: 0
   ```

## Error Handling

- If push fails: the draft is still saved locally. Tell the user: "Push failed ({error}). Your draft is safe — try again later."

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.