Builtin Bundle Reverify

Name: Builtin Bundle Reverify
Author: zzunkie

ASecurity

builtin-bundle-reverify

17 stars
0 votes
0 copies
1 view
Added September 5, 2026

ai-agentspythonnodegitapi

Works with

Security analysis

A100/100

Scanned September 5, 2026

npx -y skills add zzunkie/yardlet --skill builtin-bundle-reverify --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Builtin Bundle Reverify?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Builtin Bundle Reverify

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/zzunkie-builtin-bundle-reverify/badge)](https://www.skillsdirectory.com/skills/zzunkie-builtin-bundle-reverify)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: builtin-bundle-reverify
description: builtin-bundle-reverify
source: learned
---
Managed built-in bundle을 network 없이 독립 재검증하는 절차: (1) `git hash-object <bundle file>`를 manifest.yaml의 upstream_blob과 대조 - exact는 일치해야 하고 adapted는 달라야 정상. (2) normalized 주장은 파일 내용의 최종 newline 제거 변형에 대해 sha1('blob {len}\0'+content)를 계산해 upstream blob과 일치하는지로 증명. (3) 금지 표면은 테스트에 의존하지 말고 push/PR·외부 URL·subagent·keychain/codesign·webfetch/api-key를 직접 grep. (4) 분류 검증은 실제 repo를 node_modules/.git 제외 rsync로 /tmp에 복사해 dogfood하고, 오분류 시 walk_signals(depth 4, 400-entry 상한, .agents/.git/target/node_modules 제외, 정렬 depth-first)를 python으로 재현해 관찰 누락을 정량화한다.