·
Last changedVersion:
This version passed the hardening gate. Hardening applied 5 targeted changes and preserved all other text. Classified findings before hardening: 1. Classified findings closed: 0. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 9. Review findings remaining: 1.
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open |
1 finding
Use this as the Rigor Improve implementation leaf skill. The installed slug
remains explore-code for compatibility.
Use the shared operating principles in
../ai-research-reproduction/references/agent-operating-principles.md; this skill should guide
bounded candidate code work without over-prescribing implementation details.
ai-research-explore instead when the task spans both current_research coordination and exploratory runs.minimal-run-and-audit or run-train. Hand off only after the user has reviewed and confirmed the changeset, and prefer short smoke runs with limited compute and time.explore_outputs/CHANGESET.mdexplore_outputs/SCIENTIFIC_CHANGELOG.mdexplore_outputs/COMPARABILITY_REPORT.mdexplore_outputs/TOP_RUNS.mdexplore_outputs/status.jsonPlace these outputs at the root of the isolated worktree, outside the trusted baseline tree, and ask the user before overwriting existing output files.
Use references/explore-policy.md, ../ai-research-reproduction/references/research-rigor-principles.md, scripts/plan_code_changes.py, and scripts/write_outputs.py.
The sibling skill reference files are optional guidance only; this skill's boundaries, authorization rules, and isolation requirements take precedence over them. When they are missing, follow references/explore-policy.md.
The planning script reads files in the target repository and optional local JSON inputs and prints a plan; it writes nothing and makes no network calls. The output writer loads and runs a shared writer module from the sibling ai-research-reproduction skill, outside this skill directory. Before running it, confirm with the user that this module comes from the installed RigorPilot skills, and run both scripts only against the isolated worktree.
Get started with chainctlchainctl skill install public/lllllllama/explore-code:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/lllllllama/skills/explore-code:latest
MIT
HARDENING.md
LICENSE
SKILL.md
agents/openai.yaml
references/explore-policy.md
scripts/plan_code_changes.py
scripts/write_outputs.py