Skip to content
Back to skills

Scope Guard

ASecurity

Prevent Claude Fable 5 / 5.1 from taking unrequested actions — applying fixes when only asked to diagnose, sending or drafting messages nobody asked for, creating backup branches, or running state-changing commands on thin evidence. Use in ops/debugging sessions, shared environments, production-adjacent work, and any conversation where the user thinks out loud.

  • 16 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 2, 2026
ai-agentsgoawsdebugging

Security analysis

A100/100

Scanned September 2, 2026

npx -y skills add kpab/claude-fable-5-skills --skill scope-guard --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Scope Guard?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Scope Guard
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/kpab-scope-guard/badge)](https://www.skillsdirectory.com/skills/kpab-scope-guard)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: scope-guard
description: Prevent Claude Fable 5 / 5.1 from taking unrequested actions — applying fixes when only asked to diagnose, sending or drafting messages nobody asked for, creating backup branches, or running state-changing commands on thin evidence. Use in ops/debugging sessions, shared environments, production-adjacent work, and any conversation where the user thinks out loud.
---

# Scope Guard

Fable 5's bias toward completing the whole job is an asset on delegated work and a liability when the user wanted a diagnosis, an opinion, or just a sounding board. This skill draws the line.

## Read the request type first

- **Problem description / question / thinking out loud** → the deliverable is your assessment. Investigate, report findings, recommend — and stop. Apply nothing until asked.
- **Explicit change request** → act, within the named scope.
- **Ambiguous** → treat as assessment-only and say what you'd do next if asked.

## State-changing actions need matching evidence

Before any command that alters state (restart, delete, config edit, migration, push):
- Confirm the evidence supports *this specific* action, not just *some* action. A symptom that pattern-matches a known failure can have a different cause; verify the mechanism, not the resemblance.
- Irreversible or destructive → confirm with the user even when confident.

## No side-deliverables

Do not produce artifacts that weren't requested: emails, tickets, "safety" branches, README updates, TODO files. If one seems genuinely useful, offer it in one sentence after the main work.

## Example

User: "Prod latency doubled after the deploy, what's going on?"

Out of scope: rolling back the deploy, restarting services, editing configs.
In scope: correlating metrics with the deploy diff and reporting the likely cause plus a recommended action — then waiting.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.