Skip to content
Back to skills

Assets

ASecurity

Run bounded engineering summaries, handoffs, and extraction with Questlock using approved compact memory, local Ollama inference or direct APIs, explicit context limits, and snapshot result reuse.

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 13, 2026
ai-agentsgoapi

Works with

  • api

Security analysis

A100/100

Pro scans all 7 files and shows the line behind each finding

Scanned October 13, 2026

npx -y skills add spfuzzylink/questlock --skill assets --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Assets?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Assets
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/spfuzzylink-assets/badge)](https://www.skillsdirectory.com/skills/spfuzzylink-assets)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: questlock
description: Run bounded engineering summaries, handoffs, and extraction with Questlock using approved compact memory, local Ollama inference or direct APIs, explicit context limits, and snapshot result reuse.
---

# Questlock

Use Questlock for a small text-only subtask whose inputs and completion criteria can be captured in one explicit snapshot. Preserve the user's provider and model choice. When the goal is zero provider bills or independence from credits, prefer a suitable installed local Ollama model for routine summaries, handoffs, and extraction. If it is unavailable or inadequate, report that limitation; do not silently fall back to a paid provider. Keep complex investigation and final judgment with the coding assistant unless the user deliberately chooses a local agent.

Read [references/workflow.md](references/workflow.md) for the spec, local broker setup, and configuration. Adapt [references/local-summary.json](references/local-summary.json) for a local job, or [references/openai-summary.json](references/openai-summary.json) / [references/claude-summary.json](references/claude-summary.json) for an authorized API job. Gather current facts and the user's approved preferences; do not import entire conversation histories. Treat that compact approved memory as visible reference data, not model training. Put necessary preferences and live change facts in required context chunks, optional older material in chunks with explicit priority, and preserve relevant constraints when reducing context.

Run `sh scripts/run.sh plan --spec PATH` from this skill directory. Review the full selected request and omitted chunks before a live run. Required chunks must fit, and optional chunks remain whole; Questlock performs no hidden summarization. Do not place credentials in the spec, prompt, command flags, or output files. Send task content only to the provider endpoint appropriate for the user's authorized work and sensitivity.

Run `sh scripts/run.sh run --spec PATH` for the bounded job. The helper reads the broker token only for `run`; Ollama needs no provider key, and API keys stay in the environment. Use a local-only broker scope for local jobs so API dollar ledgers do not mix with unmetered inference. Require successful exit, `response.complete: true`, and `durable: true` before using `response.text`. Check that the answer meets the task's facts and completion criteria. Report measured this-run usage and Questlock result reuse when useful; do not invent savings percentages.

Result reuse is opt-in for an exact task snapshot whose answer remains valid. Update `revision` when external facts or approved memory change. Use generation for text, not to replay external actions. A pending, incomplete, or unknown result is a stopping condition: inspect broker/upstream state before deliberately changing revision, since another attempt could duplicate computation or billing. Never automatically retry paid generation or fall back to a different provider/model after an uncertain outcome.

`sh scripts/run.sh quest` validates six scenarios offline. Local Ollama generation runs on the user's hardware without provider token metering; hardware, electricity, and time still cost resources. Questlock rejects cloud models and non-loopback Ollama endpoints and does not fall back. It does not train weights, proxy the coding assistant's whole agent protocol, or change its global model. Direct API jobs have separate billing; the surrounding hosted assistant still uses its normal allowance.

Files in this skill

  • SKILL.md3.5 KB
  • agents/openai.yaml42 B
  • references/claude-summary.json1 KB
  • references/local-summary.json1.3 KB
  • references/openai-summary.json1 KB
  • references/workflow.md8.1 KB
  • scripts/run.sh1.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.