Autonomous Skill

What to consider before installing or running this skill: - The skill will create a .autonomous/<task>/ directory and will read and modify both those tracking files and your project files (it explicitly recommends running builds, tests, and git commits). If you run it in a real project, expect it to change source files and commit them. - The run script invokes the 'claude' CLI with a permission-bypass flag (--permission-mode bypassPermissions). That bypass is the key risk: it asks the local Claude client to ignore normal permission controls so the agent can act autonomously. Ask yourself whether you trust any skill to operate without additional prompts. - Because the skill uses your local 'claude' CLI, it will act with whatever credentials/config the CLI is already using. There are no declared env vars, but credentials are implicitly used — consider running this only in a disposable environment or a non-production repository. - Recommendations before use: - Inspect and, if needed, remove or modify the '--permission-mode bypassPermissions' invocation so actions require explicit confirmation. - Run the script first in an isolated test repo (or a throwaway container) to observe behavior and ensure it doesn't touch anything sensitive. - Review and restrict filesystem location where the skill runs (avoid running at system root). The script validates task names to avoid path traversal, but you should still run in a controlled workspace. - Consider requiring manual confirmation before commits or disabling auto-continue (the script has flags for no-auto-continue / max-sessions; use them). - If you need higher assurance, request from the skill author an explanation why permission bypass is required and a version that operates without bypass or with an explicit confirmation step for file modifications. Confidence note: medium — the skill's files and instructions are coherent with an autonomous task-runner, but the explicit permission-bypass flag and autonomous continuation materially increase risk. Additional information (author rationale for bypassPermissions, details on how the platform enforces 'permission-mode', or a version of the skill without bypass) would raise or lower confidence.