Acceptance Criteria CreatorBLOCK
skills/dicklesworthstone/acceptance-criteria-creator
High-performance AI coding agent CLI written in Rust with zero unsafe code
Verdict
BLOCK
Grade
D
Trust score
69 /100
Version
1.0.0
Hosts
—
License
NOASSERTION
Stars
1,872
01
Overview
High-performance AI coding agent CLI written in Rust with zero unsafe code
Read from source at commit
46a2537504c9OBSERVED · 2026-10-1002
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: "acceptance-criteria-creator" description: | Create acceptance criteria creator operations. Auto-activating skill for Enterprise Workflows. Triggers on: acceptance criteria creator, acceptance criteria creator Part of the Enterprise Workflows skill category. Use when working with acceptance criteria creator functionality. Trigger with phrases like "acceptance criteria creator", "acceptance creator", "acceptance". allowed-tools: "Read, Write, Edit, Bash(cmd:*)" version: 1.0.0 license: MIT author: "Jeremy Longshore <[email protected]>" --- # Acceptance Criteria Creator ## Overview This skill provides automated assistance for acceptance criteria creator tasks within the Enterprise Workflows domain. ## When to Use This skill activates automatically when you: - Mention "acceptance criteria creator" in your request - Ask about acceptance criteria creator patterns or best practices - Need help with enterprise workflow skills covering project management, compliance, governance, and enterprise integration patterns. ## Instructions 1. Provides step-by-step guidance for acceptance criteria creator 2. Follows industry best practices and patterns 3. Generates production-ready code and configurations 4. Validates outputs against common standards ## Examples **Example: Basic Usage** Request: "Help me with acceptance criteria creator" Result: Provides step-by-step guidance and generates appropriate configurations ## Prerequisites - Relevant development environment configured - Access to necessary tools and services - Basic understanding of enterprise workflows concepts ## Output - Generated configurations and code - Best practice recommendations - Validation results ## Error Handling | Error | Cause | Solution | |-------|-------|----------| | Configuration invalid | Missing required fields | Check documentation for required parameters | | Tool not found | Dependency not installed | Install required tools per prerequisites | | Permission denied | Insufficient access | Verify credentials and permissions | ## Resources - Official documentation for related tools - Best practices guides - Community examples and tutorials ## Related Skills Part of the **Enterprise Workflows** skill category. Tags: enterprise, governance, compliance, project-management, integration
03
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (4)
HIGHPrompt injection · prompt.credential_read · CWE-94, CWE-1427
SKILL.md:60
| Permission denied | Insufficient access | Verify credentials and permissions |
Why it matters. asks the agent to read credentials
HIGHPrivilege escalation / persistence · review.unsafe_action · CWE-269, CWE-250
SKILL.md
allowed-tools: "Read, Write, Edit, Bash(cmd:*)"
Why it matters. The Bash tool is granted a wildcard cmd:* permission, meaning the agent can execute arbitrary shell commands with no restriction, which is a privileged and potentially destructive capability granted by default.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts
MEDIUMInventory / provenance · inv.symlink · CWE-1104
.beads/beads.jsonl
.beads/beads.jsonl
Why it matters. link not followed
MEDIUMPrompt injection · review.misleading_scope · CWE-94, CWE-1427
<listing:description>
Create acceptance criteria creator operations. Auto-activating skill for Enterprise Workflows.
Why it matters. The skill description is circular and vague—'acceptance criteria creator operations' is never defined, giving the agent no clear scope and obscuring what the skill actually does when it auto-activates.
Fix. rewrite it so the instruction says plainly what it does, and asks the user before it acts
Gates applied: no_behavioural_pass.
Audited 2026-10-10 · audit v0.4.1 · source sha
46a2537504c9full audit observations/trust-audit/skill/dicklesworthstone__acceptance-criteria-creator.json · Report an issue / request a re-scan04
Audit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 46a2537504c9 | BLOCK | D | 69 | first audit |
05
Questions
What does the Acceptance Criteria Creator skill do?
High-performance AI coding agent CLI written in Rust with zero unsafe code
Is Acceptance Criteria Creator safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What can Acceptance Criteria Creator access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
How current is this page?
The grade is for one exact copy of the source (46a2537504c9), read on 2026-10-10. The repository is watched, and a new audit runs when it changes — this is the first audit.