Is wizard safe?
Grade A, 100/100. No meaningful risk found.
Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
Awizard
skills/engineering/wizard100/100 · No meaningful risk foundNo security findings
wizard
skills/engineering/wizardGenerate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.
- Content hash
- sha256:618c71e734c2c04c9904fc6b9fb2668c8d9603902434e41203128f4a3802c219
- Files
- 3
- Quality
- 100/100
Security findings
None of the 30 rules matched.
Files in this skill
- SKILL.md4.0 KB
- template.sh9.3 KB
- agents/openai.yaml96 B
Questions about wizard
- Is wizard safe to install?
- Our scanner gave wizard grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
- How do I install wizard in Claude Code or Codex?
- Run skillhash add github:mattpocock/skills/skills/engineering/wizard. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
- What happens if wizard changes upstream?
- Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.
More from mattpocock/skills
- A
ask-matt
297kmattpocock/skills
Ask which skill or flow fits your situation. A router over the skills in this repo.
No security findings - A
code-review
297kmattpocock/skills
Review the changes since a fixed point (commit, branch, tag, or merge-base) along two axes: Standards (does the code follow this repo's documented coding standards?) and Spec (does the code match what the originating issue/spec asked for?). Runs both reviews in parallel sub-agents and reports them side by side. Use when the user wants to review a branch, a PR, work-in-progress changes, or asks to "review since X".
No security findings - A
writing-beats
297kmattpocock/skills
Writing, exploit; assemble raw material into a journey of beats, grounding each term before a beat leans on it.
No security findings - A
codebase-design
297kmattpocock/skills
Shared vocabulary for designing deep modules. Use when the user wants to design or improve a module's interface, find deepening opportunities, decide where a seam goes, make code more testable or AI-navigable, or when another skill needs the deep-module vocabulary.
No security findings - A
diagnosing-bugs
297kmattpocock/skills
Diagnosis loop for hard bugs and performance regressions. Use when the user says "diagnose"/"debug this", or reports something broken/throwing/failing/slow.
No security findings - A
domain-modeling
297kmattpocock/skills
Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing a GLOSSARY.md, or recording or editing an ADR.
No security findings - A
grill-with-docs
297kmattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
No security findings - A
writing-fragments
297kmattpocock/skills
Writing, explore: mine raw fragments, no structure yet.
No security findings