Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed workflow helper that can create local task notes and run bounded helper scripts, with no hidden exfiltration, destructive behavior, or privilege escalation found.
Install this only if you want a broad workflow skill that may stay active for a task and create local .loop state during deeper work. Review the bundled scripts first, prefer pinned or manually reviewed install/update methods in sensitive environments, and avoid enabling implicit/default activation if you want the skill used only on explicit command.
parent -> prompt generation -> downstream simulation -> product/UI prompt review -> parent ``` The output prompt must itself route product UX before implementation and rendered UI after implementation. ## Outcome-contract examples
1. Primary records: official documentation, source code, standards, filings, datasets, current policies, full talks, papers 2. Reproducible observation or direct testing 3. High-quality independent analysis with transparent method 4. Direct practitioner evidence with clear context and limitations 5. Vendor, marketing, affiliate, PR, SEO, AEO, or GEO content for discovery or for documenting the publisher's own claim 6. Secondary summaries for discovery only
## Activate and continue cleanly Run this workflow when the user explicitly invokes it, asks to keep it active for the current task or thread, or when an applicable personal, workspace, or project instruction says to use it by default. Once activated for a task, keep it active for substantive follow-ups in that task until the user opts out or clearly replaces the task. The user does not need to repeat the skill tag. Carrying the preference into unrelated new threads still requires an applicable persistent instruction; do not pretend thread memory is global configuration. When loop-by-default is active, match the loop to the work. Use Light for a narrow answer, clarification, or reversible edit. Escalate to Standard or Deep only when stronger evidence, iteration, or coordination can materially improve the outcome.
def find_project_root(start: Path) -> Path:
try:
result = subprocess.run(
["git", "rev-parse", "--show-toplevel"],
cwd=start,
check=True,def ensure_private_state(root: Path, edit_gitignore: bool) -> None:
"""Exclude .loop locally; edit the tracked ignore file only by explicit request."""
try:
ignored = subprocess.run(
["git", "check-ignore", "-q", ".loop/probe"],
cwd=root,
check=False,if edit_gitignore:
append_exclusion(root / ".gitignore")
return
result = subprocess.run(
["git", "rev-parse", "--git-path", "info/exclude"],
cwd=root,
check=True,with tempfile.TemporaryDirectory() as temp:
state_dir = Path(temp)
(state_dir / "state.md").write_text(self._state(mode, declaration))
return subprocess.run(
[
"python3",
str(CREATE_HANDOFF),def test_generated_deep_template_rejects_blank_topology_declaration(self) -> None:
with tempfile.TemporaryDirectory() as temp:
initialized = subprocess.run(
[
"python3",
str(INIT_LOOP_STATE),No suspicious patterns detected.