Skip to content
Back to skills

Smithers Chain

ASecurity

Maintain the existing @smthrs/chain runner, journal replay, catalog handlers, or sandbox boundary.

  • 429 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 26, 2026
ai-agentsrustapi

Works with

  • api

Security analysis

A100/100

Scanned September 26, 2026

npx -y skills add smithersai/smithers --skill smithers-chain --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Smithers Chain?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Smithers Chain
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/smithersai-smithers-chain/badge)](https://www.skillsdirectory.com/skills/smithersai-smithers-chain)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: smithers-chain
description: Maintain the existing @smthrs/chain runner, journal replay, catalog handlers, or sandbox boundary.
---

# Existing chain package

Read [the chain README](../../../packages/smithers/agent/chain/README.md) and its tests before changing this package. Keep the main product's single `Agent.Service` loop and `@smthrs/flow` authoring model; this skill is for the existing chain implementation, not a reason to add a second loop or graph API.

`QuickJsRunner.layer()` creates a sealed QuickJS realm per link with memory, stack, and step limits and no host globals. `ScriptRunner.layerInProcess` has no isolation and belongs only in trusted fixtures; a script there can reach process globals and dynamic imports.

The journal is the state authority. A matching settled call replays once, but a handler may execute again if it succeeded before `CallSettled` was recorded. Make external effects idempotent or give them an external durable key from the stable catalog call slot (`chain`, `link`, `ordinal`). Preserve the declaration/script identity checks that fail on replay divergence. Verify a crash after handler success and before settle when changing recovery.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.