Agent skill · Audited from source
compass-skills
skill · dongshuyan/compass-skillsMIT licenceAudited 19 Oct 2026 · source 220e40110f40
Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 220e40110f40 and observed filesystem and network access and no hard-coded secrets. The audit raised 20 findings, 1 critical or high. What it does: Draft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically repetitive, or process-leaking language while preserving claims, evidence strength, logical…
Cite
Cite this page
ModelsAtlas. “compass-skills (dongshuyan/compass-skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/dongshuyan/compass-skills
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemDeclared1 observation
- NetworkDeclared4 observations
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | WARN | 4 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 11 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (20)
HIGHPrompt injectionprompt.zero_width · skill-writing-tutorial.html:3385
<script type="application/json" id="i18n-en">{"0. 为什么需要":"0. Why skills","1. 最小模型":"1. Minimum model","1. 真实跑通":"1. Real run-through","1. 给目标":"1. Give goals","10. 迭代优化":"10. Iteration","11. 常见类型":"11- Why
- invisible characters in instruction text
- Fix
- strip non-printing characters
MEDIUMNetwork egressnet.raw_ip · skills/user-profile-keeper/scripts/onboarding_webui.py:579
url = f"http://127.0.0.1:{port}/"- Why
- No further detail recorded for this rule.
- Fix
- —
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/scripts/validate_interviewer_report_data.py:285
raw = base64.b64decode(encoded, validate=True)
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/tests/test_candidate_profile_enrichment.py:33
JPEG_WITH_METADATA = base64.b64decode(
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/tests/test_candidate_profile_enrichment.py:648
sanitized = base64.b64decode(payload["data_uri"].split(",", 1)[1])- Why
- No further detail recorded for this rule.
- Fix
- —
INFOInventory / provenanceinv.oversize · assets/compass-logo.png
assets/compass-logo.png
- Why
- 2865492 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · assets/compass-roadmap-ecosystem.en.png
assets/compass-roadmap-ecosystem.en.png
- Why
- 1537735 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · assets/compass-roadmap-ecosystem.zh.png
assets/compass-roadmap-ecosystem.zh.png
- Why
- 1492539 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · assets/logo-variants/compass-logo-alien-artifact.png
assets/logo-variants/compass-logo-alien-artifact.png
- Why
- 2732974 bytes not read
- Fix
- —
INFOInventory / provenanceinv.oversize · assets/logo-variants/compass-logo-ceramic-minimalist.png
assets/logo-variants/compass-logo-ceramic-minimalist.png
- Why
- 2035563 bytes not read
- Fix
- —
INFOPrompt injectionprompt.conditional_escalation · skills/session-handoff-prompt/SKILL.md:98
- If the user asks for a public/shareable handoff, run redaction and shareable validation first.
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.conditional_escalation · skills/session-handoff-prompt/references/examples.md:90
If the user asks for a public handoff, switch to `privacy=shareable`, redact local paths, and validate with:
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/SKILL.md:33
- If the user asks for the onboarding questionnaire or first-run WebUI, run `scripts/onboarding_webui.py --user <id>`.
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/SKILL.md:40
- No active profile exists: recommend the onboarding questionnaire. If the user asks for it, run the WebUI. If the user declines, continue with the current task and use proposals for any durable profi
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/references/questionnaire.md:36
If the user asks for the questionnaire or WebUI, run it. If the user declines, continue with the current task and create proposals for any durable candidates. Current-session AGENTS rules, skill opera
- Why
- No further detail recorded for this rule.
- Fix
- —
INFOPrompt injectionprompt.credential_read · AGENTS.md:52
- Do not read password managers, keychains, SSH keys, browser cookies, API keys, tokens, or verification codes.
- Why
- asks the agent to read credentials
- Fix
- —
INFOPrompt injectionprompt.credential_read · README.en.md:411
- [Verified] Do not read credentials, cookies, browser sessions, or unrelated private logs.
- Why
- asks the agent to read credentials
- Fix
- —
INFOPrompt injectionprompt.credential_read · README.en.md:426
1. Store locally only. Do not upload anything or read browser cookies, tokens, or credentials.
- Why
- asks the agent to read credentials
- Fix
- —
INFOPrompt injectionprompt.credential_read · README.md:415
- [Verified] Do not read credentials, cookies, browser sessions, or unrelated private logs.
- Why
- asks the agent to read credentials
- Fix
- —
INFOPrompt injectionprompt.credential_read · README.md:430
1. Store locally only. Do not upload anything or read browser cookies, tokens, or credentials.
- Why
- asks the agent to read credentials
- Fix
- —
Audit 0.4.1 · source sha 220e40110f40 · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherdongshuyan GitHub userOwner of the repository this skill is read from
- Source folderdongshuyan/compass-skillsThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict220e40110f40A new audit runs when the source changes
- Repository statusNot archivedPushed today
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Draft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically repetitive, or process-leaking language while preserving claims, evidence strength, logical…
--- name: academic-humanizer description: >- Draft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically repetitive, or process-leaking language while preserving claims, evidence strength, logical relations, manuscript-wide terminology identity, document-level pattern variation, and scholarly register. Use for papers, abstracts, grants, cover letters, and reviewer responses when the user asks to de-AI, humanize, audit AI-like phrasing, or rewrite text without changing meaning. English is primary; Chinese is supported. Not for detector evasion, policy circumvention, pure translation, non-academic copy, or adding facts, citations, examples, or author experiences that the source does not contain. --- # Academic Humanizer Improve academic prose by removing observable writing defects, not by imitating imperfection or optimizing an authorship detector. Preserve the author's facts, argument, uncertainty, and disciplinary voice. This skill does not guarantee how any reader or detector will classify a text. ## Portability This skill is agent-agnostic. Its core behavior is defined by `SKILL.md` and `references/`; Python is optional and supports reproducible diagnostics. - Resolve `<skill-dir>` from the directory containing this `SKILL.md`. - Let `<python>` mean an available Python 3 launcher, such as `python3`, `py -3`, or `python`. - Let `<input-file>` mean a user-authorized local text file. Quote paths that contain spaces and use the host shell's path separator. - Do not assume a fixed skill root, home directory, shell, operating system, agent name, or path separator. - `agents/openai.yaml` is optional interface metadata. Core behavior does not depend on a particular agent runtime. - If Python is unavailable, skip the scripts and apply the same contracts directly. ## Load the operating references Read these before drafting or editing: 1. [Semantic contract](references/semantic-contract.md) for claim preservation, locked spans, deletion safety, and the internal claim ledger. 2. [Terminology contract](references/terminology-contract.md) for canonical terms, declared aliases, coined names, intentional distinctions, and the internal terminology ledger. Always load it for multi-span or manuscript-level work. 3. [Global pattern contract](references/global-pattern-contract.md) for the local-to-document audit, distribution map, scope limits, and whole-document repair. Always load it for multi-sentence work. 4. [Academic whitelist](references/whitelist-academic.md) for protected scholarly forms in both languages. 5. [Contrast logic](references/contrast-logic.md) for false-opposition triage in English and Chinese. Always load it; this is a cross-language semantic rule. 6. Route once by the majority language of editable prose, then read exactly one: [English rules](references/rules-en.md) or [Chinese rules](references/rules-zh.md). Read [worked examples](references/examples.md) on first use, after changing a rule, or whenever fact preservation, contrast, or over-correction is uncertain. Read [metrics specification](references/metrics-spec.md) before running `scripts/metrics.py`; its output is descriptive evidence only. ## Supported operations - **generate**: draft from user-supplied claims, outline, data, and sources. - **detect**: identify high-confidence defects without rewriting. - **rewrite**: minimally revise supplied prose; this is the default when the user asks to de-AI or humanize text. - **edit**: apply the same minimal revisions to a named file. Do not create another routing tree for paper section or discipline. Methods, Results, Discussion, reviewer responses, and grants use the same contracts; the whitelist handles legitimate register differences. Ask one direct question only when the requested genre changes what counts as acceptable and context does not resolve it. ## Language route Route on editable prose, excluding fenced code, formulas, block quotations, and a trailing reference list. Use orthographic tokens: each CJK character is one token and each contiguous Latin word is one token. This keeps embedded terms such as `Transformer` or `ImageNet` from outweighing the Chinese sentence around them: `r = CJK tokens / (CJK tokens + Latin word tokens)` - `r >= 0.5`: Chinese branch. - `r < 0.5`: English branch. - No countable prose: stop and ask for text or an intended output language. English terms in Chinese prose and Chinese terms in English prose remain verbatim. If Python is available and the route is genuinely unclear, optionally run `<python> "<skill-dir>/scripts/metrics.py" "<input-file>" --route`. Routing is internal and never appears in the clean artifact. ## Single arbitration order Earlier rows win. References may elaborate this table but must not define a second priority order. | Priority | Constraint | Operational meaning | |---|---|---| | **C0** | Artifact boundary | Process instructions, editor narration, and tool residue never enter the artifact. C0 applies only to process-layer text; it never authorizes deletion of real content. | | **C1** | Semantic fidelity | Every output claim maps to the source bundle; every material source claim remains represented. No added facts, relations, examples, citations, motivations, or limitations. | | **C2** | Locked-span protection | Quotations, formulas, code, references, citation keys, statistical notation, proper nouns, and requested verbatim text remain unchanged. | | **C3** | Terminology identity | One scientific concept uses one canonical term across the editable manuscript. Preserve declared full-name/abbreviation pairs, necessary grammatical forms, and intentional distinctions; never infer identity from similarity alone. | | **C4** | Academic register | Preserve functional hedging, passive voice, nominalization, discourse markers, and Chinese scholarly morphology. | | **C5** | Argument structure | Pre
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 220e401
npx skills add . --list npx skills add dongshuyan/compass-skills --skill '*' -a claude-code npx skills add dongshuyan/compass-skills --list npx skills add dongshuyan/compass-skills --skill '*' -a codex -a claude-code npx skills add dongshuyan/compass-skills --skill clear-communication -a codex -a claude-code
git clone https://github.com/dongshuyan/compass-skills git -C compass-skills checkout 220e40110f40
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 220e40110f40 only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- !CAUTION B 89 / 100
first audit · source
220e40110f40
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/dongshuyan/compass-skills/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →zydo/skills
Use this skill for Python and TypeScript when a user wants to understand an unfamiliar API before coding against it — especially internal libraries, third-party SDKs, recently-upgraded dependencies, or APIs with…
ar9av/obsidian-wiki
Browse or compare wiki knowledge by originating AI tool. Use for cross-tool memory questions, tool-specific knowledge, or gap/diff analysis between Codex, Claude, Hermes, and other agents.
ar9av/obsidian-wiki
Explain and apply the foundational LLM Wiki architecture and knowledge-management strategy. Use for setup, architecture, schema, or organization decisions; operational ingest/query/lint work uses dedicated skills.
ar9av/obsidian-wiki
Ingest Hermes agent history into Obsidian as distilled knowledge. Use for importing or mining ~/.hermes sessions, memories, or logs; use wiki-agent for targeted topic-only cross-agent recall.
ar9av/obsidian-wiki
Independently check whether an implementation matches its stated goal and return PASS/WARN/FAIL with actionable issues. Use for second-opinion validation of an implementation or generated output.
ar9av/obsidian-wiki
Configure Obsidian graph colors by tag, folder, category, or visibility by updating .obsidian/graph.json. Use for graph colorization; preserve other graph settings and back up before changes.
Add this badge to your README
[](https://modelsatlas.com/skills/dongshuyan/compass-skills/)
<a href="https://modelsatlas.com/skills/dongshuyan/compass-skills/"><img src="https://modelsatlas.com/skills/dongshuyan/compass-skills/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about compass-skills
What does the compass-skills skill do?
Is compass-skills safe to install?
What can compass-skills access on my machine?
Which assistants does compass-skills work with?
How current is this page?
Sources
- github.com/dongshuyan/compass-skills — the audited source at commit 220e40110f40 and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the compass-skills skill do?
- Is compass-skills safe to install?
- What can compass-skills access on my machine?