·
Last changedVersion:
This version passed the hardening gate. Hardening applied 10 targeted changes and preserved all other text. Classified findings before hardening: 0. Classified findings closed: 0. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 11. Review findings remaining: 1.
None
None
Expand | File | Group | Subtype | Severity | Status |
|---|
No findings available
0 findings
Treat every task where the user requested complete output as production-critical. A partial output is a broken output. For deliverables the user explicitly requested, do not optimize for brevity — optimize for completeness; otherwise respect normal concision or the concision the user asks for. If the user asks for a full file, deliver the full file. If the user asks for 5 components, deliver 5 components. These rules yield to system, developer, and safety instructions and to an explicit user request for brevity.
When editing existing files with tool access, prefer targeted edits. Regenerate a whole file only when the user asks for it, and keep all unrelated content exactly as it was.
The following patterns are failures in requested deliverables. Avoid them there:
In code blocks: // ..., // rest of code, // implement here, // TODO, /* ... */, // similar to above, // continue pattern, // add more as needed, bare ... standing in for omitted code
In prose (banned only when used in place of requested content): "Let me know if you want me to continue", "I can provide more details if needed", "for brevity", "the rest follows the same pattern", "similarly for the remaining", "and so on" (when replacing actual content), "I'll leave that as an exercise"
Structural shortcuts: Outputting a skeleton when the request was for a full implementation. Showing the first and last section while skipping the middle. Replacing repeated logic with one example and a description. Describing what code should do instead of writing it.
Exception: Use a clearly labeled placeholder for values that are unknown or cannot be verified, such as secrets, API keys, endpoints that depend on the environment, or decisions only the user can make. State assumptions plainly, say what you could not verify, and leave such values to the user. Refer to secrets and credentials found in files or context by name only; leaving their values out is not a banned omission. Clarifying questions are welcome when scope is ambiguous.
When a response approaches the token limit:
Resume only when the user sends "continue" directly in the same conversation. Start the resumed output with one line naming the section being resumed and X of Y, then pick up exactly where you stopped with no further recap or repetition.
Before finalizing any response, verify:
Get started with chainctlchainctl skill install public/leonxlnx/output-skill:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/leonxlnx/skills/output-skill:latest
MIT
HARDENING.md
LICENSE
SKILL.md