project-context
Skill Doctor product and architecture context. Use at the start of a session, when deciding where code lives, when the user asks how the scanner works, or before any non-trivial change.
Install
npx skills add https://github.com/KalarisLabs/Skill-Doctor/tree/main/skills/project-context
claude plugin marketplace add https://llmmart.ai/marketplace.json && claude plugin install kalarislabs-skill-doctor@llmmart
git clone https://github.com/KalarisLabs/Skill-Doctor.git
The skills CLI installs just this skill, for any of its supported agents. Claude Code installs the whole kalarislabs/skill-doctor collection as a plugin from our marketplace. Git is the plain clone.
Skill manifest
Project context
Read AGENTS.md then CONTEXT.md if they exist. This skill is the short form.
Product
Skill Doctor is a Rust CLI that scans AI agent skill files. The shippable core is deterministic L1. L2 (host-delegated semantics), L3 (sandbox), and L4 (intel) are optional and must degrade to reduced coverage, never a crash or a dropped L1 finding.
Repo: KalarisLabs/Skill-Doctor. Do not create a new GitHub repository.
Pipeline
input → L0 intake/digest/cache
→ L1 static engines THE PRODUCT
→ L2 host-delegated MCP optional, additive-only
→ L3 process harness + replay feature sandbox
→ L4 threat intel network opt-in
→ L5 score / coverage / report
Default CLI: L0+L1+L5 with --offline --deterministic.
Crate map
| Crate | Owns |
|---|---|
skill-doctor |
clap, printers, exit codes |
skill-doctor-core |
L0/L1/L4/L5, taxonomy, scoring |
skill-doctor-rules |
build.rs compiles rules/ |
skill-doctor-neutralize |
SD-11 envelope, no I/O |
skill-doctor-mcp |
host-delegated MCP |
skill-doctor-sandbox |
L3, only crate that may use unsafe |
SDTM-v1 — do not renumber
SD-01 prompt injection · SD-02 command injection · SD-03 exfil · SD-04 scope (capability differ, no model) · SD-05 supply chain · SD-06 SSRF · SD-07 tool poisoning · SD-08 backdoors · SD-09 flooding · SD-10 obfuscation · SD-11 scanner-mediated injection.
Exit codes (stable)
0 clean · 1 usage/internal · 2 findings ≥ --fail-on · 3 coverage under threshold.
Build order if the tree is still a stub
- CLI
--help/version/scanstub - L0 digest
- rules crate + one YARA rule per class
- L1 engines
- L5 reports + exit codes
- additive-only scorer + neutralize
- fixtures + determinism test
- MCP
- CI matching
TESTING.md - release last
Load rust-invariants before changing defaults. Load ci-cd before touching workflows. Load rust-perf before optimizing.
Files (skill-doctor)
-
SKILL.md 2.2 KB
--- name: project-context description: Skill Doctor product and architecture context. Use at the start of a session, when deciding where code lives, when the user asks how the scanner works, or before any non-trivial change. --- # Project context Read `AGENTS.md` then `CONTEXT.md` if they exist. This skill is the short form. ## Product Skill Doctor is a **Rust CLI** that scans AI agent skill files. The shippable core is **deterministic L1**. L2 (host-delegated semantics), L3 (sandbox), and L4 (intel) are optional and must degrade to **reduced coverage**, never a crash or a dropped L1 finding. Repo: `KalarisLabs/Skill-Doctor`. Do not create a new GitHub repository. ## Pipeline ``` input → L0 intake/digest/cache → L1 static engines THE PRODUCT → L2 host-delegated MCP optional, additive-only → L3 process harness + replay feature sandbox → L4 threat intel network opt-in → L5 score / coverage / report ``` Default CLI: L0+L1+L5 with `--offline --deterministic`. ## Crate map | Crate | Owns | |-------|------| | `skill-doctor` | clap, printers, exit codes | | `skill-doctor-core` | L0/L1/L4/L5, taxonomy, scoring | | `skill-doctor-rules` | `build.rs` compiles `rules/` | | `skill-doctor-neutralize` | SD-11 envelope, no I/O | | `skill-doctor-mcp` | host-delegated MCP | | `skill-doctor-sandbox` | L3, only crate that may use `unsafe` | ## SDTM-v1 — do not renumber SD-01 prompt injection · SD-02 command injection · SD-03 exfil · SD-04 scope (capability differ, no model) · SD-05 supply chain · SD-06 SSRF · SD-07 tool poisoning · SD-08 backdoors · SD-09 flooding · SD-10 obfuscation · SD-11 scanner-mediated injection. ## Exit codes (stable) `0` clean · `1` usage/internal · `2` findings ≥ `--fail-on` · `3` coverage under threshold. ## Build order if the tree is still a stub 1. CLI `--help` / `version` / `scan` stub 2. L0 digest 3. rules crate + one YARA rule per class 4. L1 engines 5. L5 reports + exit codes 6. additive-only scorer + neutralize 7. fixtures + determinism test 8. MCP 9. CI matching `TESTING.md` 10. release last Load `rust-invariants` before changing defaults. Load `ci-cd` before touching workflows. Load `rust-perf` before optimizing.
Comments (0)
Sign in to join the conversation.
Reviews (0)
No reviews yet.
No comments yet.