Installs into .claude/skills of the current project.
Are you the author of Ztx10 Skill Provenance Team?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/realjustawall-ztx10-skill-provenance-team)
---
name: ztx10-skill-provenance-team
description: "Treat external Skill files as untrusted; audit source, permissions and freshness."
---
# Skill Provenance Team
**Intent:** Treat external Skill files as untrusted; audit source, permissions and freshness.
## Execution protocol
1. Record GitHub owner/revision/license. Require tangible evidence, a clear owner, and a pass/fail check.
2. Reject silent remote execution. Require tangible evidence, a clear owner, and a pass/fail check.
3. Disable broad write privileges. Require tangible evidence, a clear owner, and a pass/fail check.
4. Check dependency conflicts. Require tangible evidence, a clear owner, and a pass/fail check.
5. Mark guides vs real runnable code. Require tangible evidence, a clear owner, and a pass/fail check.
## Inputs/Outputs
Input: site profile, approved brand, evidence path, task brief and allowed capabilities. Output: strict machine-readable report or orchestration plan with selected roles and reasons.
## Safety and correctness
- No existing skills may be removed. No third-party repository is executed by default.
- No edits until a human explicitly authorizes a separate fix flow.
- Always report not-run tests and confidence. Do not inflate the number of independent agents from identical prompts.
- Verify the implementation and its regression tests before completion.
