Skip to content
Back to skills

Qstack Libero

ASecurity

Catch the code that got built because it seemed useful rather than because the goal required it. Restate the goal, test each assumption against evidence, then remove, simplify, optimize, or automate in that order and never further than the goal needs. Does not cut validation, error handling that prevents data loss, security, or a repository invariant. Use as /qstack-libero after a task or feature is built, or when asked what can be deleted or simplified.

  • 7 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added September 5, 2026
ai-agentsrustgosecurity

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned September 5, 2026

npx -y skills add hani-q/qstack --skill qstack-libero --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Qstack Libero?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Qstack Libero
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/hani-q-qstack-libero/badge)](https://www.skillsdirectory.com/skills/hani-q-qstack-libero)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: qstack-libero
description: >
  Catch the code that got built because it seemed useful rather than because
  the goal required it. Restate the goal, test each assumption against
  evidence, then remove, simplify, optimize, or automate in that order and
  never further than the goal needs. Does not cut validation, error handling
  that prevents data loss, security, or a repository invariant. Use as
  /qstack-libero after a task or feature is built, or when asked what can be
  deleted or simplified.
disable-model-invocation: true
license: MIT
---

# Libero

The free defender behind the line. After the build, read what got through and
clear it. Run this on finished work before calling it done.

## Interrogate before you edit

1. State the goal in one line, from the request or the plan, not from the
   code. If the goal cannot be stated, stop and ask; nothing below works
   without it.
2. List what the work added or changed: each file, abstraction, flag,
   dependency, configuration, and test.
3. For each item, name the assumption that justifies it and the evidence for
   that assumption. "Might be needed later", "seemed cleaner", and "the
   framework usually wants this" are not evidence.
4. Sort the items: delete when the goal does not need it, simplify when a
   smaller form meets the goal, keep when it is needed as is. Optimize only
   what a measurement shows is too slow. Automate only what will run again.
5. Report the sorted list, with the assumption and evidence beside each item,
   before changing anything.

## Then change it, in that order

Delete first. Simplify what remains. Optimize only against a measurement.
Automate last. Take a rung only when the one above it cannot meet the goal.
Rerun the repository's relevant tests, linters, type checks, and builds after
the edits. A deletion that breaks the goal is reverted, not patched around.

## The floor

Never cut validation at a trust boundary, error handling that prevents data
loss, security, accessibility, or a documented repository invariant, even when
the goal as stated does not mention them. The repository's own instruction
files name its invariants; read them before sorting. When an item looks
unnecessary but sits on one of these, keep it and say why.

## Scope and authority

Invocation authorizes edits to the work just built, within the user's scope.
It never authorizes a commit, push, publication, deployment, or external
message. Inside a QStack execution loop, the implementation ladder and the
adversarial reviewer already cover this ground; use this skill on work outside
a loop, or on a finished branch before opening a pull request.

Files in this skill

  • SKILL.md2.6 KB
  • agents/openai.yaml261 B

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.