Agent skill · Audited from source

compass-skills

skill · dongshuyan/compass-skillsMIT licenceAudited 19 Oct 2026 · source 220e40110f40

★ 758pushed today
!CAUTIONGrade B · 89/100 · 20 findings · 220e401
758repo stars · whole dongshuyan/compass-skills

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 220e40110f40 and observed filesystem and network access and no hard-coded secrets. The audit raised 20 findings, 1 critical or high. What it does: Draft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically repetitive, or process-leaking language while preserving claims, evidence strength, logical…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “compass-skills (dongshuyan/compass-skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/dongshuyan/compass-skills

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100!CAUTION B
0 critical1 high1 medium3 low15 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemDeclared1 observation
  • NetworkDeclared4 observations
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS5
L1 Static sourceSecrets, path traversal, supply chain, hidden codeWARN4
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL11
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (20)

HIGHPrompt injectionprompt.zero_width · skill-writing-tutorial.html:3385
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
<script type="application/json" id="i18n-en">{"0. 为什么需要":"0. Why skills","1. 最小模型":"1. Minimum model","1. 真实跑通":"1. Real run-through","1. 给目标":"1. Give goals","10. 迭代优化":"10. Iteration","11. 常见类型":"11
Why
invisible characters in instruction text
Fix
strip non-printing characters
MEDIUMNetwork egressnet.raw_ip · skills/user-profile-keeper/scripts/onboarding_webui.py:579
F-04 Network egressCWE-200 · CWE-319Layer L1
url = f"http://127.0.0.1:{port}/"
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/scripts/validate_interviewer_report_data.py:285
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
raw = base64.b64decode(encoded, validate=True)
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/tests/test_candidate_profile_enrichment.py:33
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
JPEG_WITH_METADATA = base64.b64decode(
Why
No further detail recorded for this rule.
Fix
—
LOWObfuscation / stealthobf.decode_call · skills/assess-interview-candidate/tests/test_candidate_profile_enrichment.py:648
F-07 Obfuscation / stealthCWE-506 · CWE-94Layer L1
sanitized = base64.b64decode(payload["data_uri"].split(",", 1)[1])
Why
No further detail recorded for this rule.
Fix
—
INFOInventory / provenanceinv.oversize · assets/compass-logo.png
F-13 Inventory / provenanceCWE-1104Layer L0
assets/compass-logo.png
Why
2865492 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · assets/compass-roadmap-ecosystem.en.png
F-13 Inventory / provenanceCWE-1104Layer L0
assets/compass-roadmap-ecosystem.en.png
Why
1537735 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · assets/compass-roadmap-ecosystem.zh.png
F-13 Inventory / provenanceCWE-1104Layer L0
assets/compass-roadmap-ecosystem.zh.png
Why
1492539 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · assets/logo-variants/compass-logo-alien-artifact.png
F-13 Inventory / provenanceCWE-1104Layer L0
assets/logo-variants/compass-logo-alien-artifact.png
Why
2732974 bytes not read
Fix
—
INFOInventory / provenanceinv.oversize · assets/logo-variants/compass-logo-ceramic-minimalist.png
F-13 Inventory / provenanceCWE-1104Layer L0
assets/logo-variants/compass-logo-ceramic-minimalist.png
Why
2035563 bytes not read
Fix
—
INFOPrompt injectionprompt.conditional_escalation · skills/session-handoff-prompt/SKILL.md:98
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- If the user asks for a public/shareable handoff, run redaction and shareable validation first.
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.conditional_escalation · skills/session-handoff-prompt/references/examples.md:90
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
If the user asks for a public handoff, switch to `privacy=shareable`, redact local paths, and validate with:
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/SKILL.md:33
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- If the user asks for the onboarding questionnaire or first-run WebUI, run `scripts/onboarding_webui.py --user <id>`.
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/SKILL.md:40
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- No active profile exists: recommend the onboarding questionnaire. If the user asks for it, run the WebUI. If the user declines, continue with the current task and use proposals for any durable profi
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.conditional_escalation · skills/user-profile-keeper/references/questionnaire.md:36
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
If the user asks for the questionnaire or WebUI, run it. If the user declines, continue with the current task and create proposals for any durable candidates. Current-session AGENTS rules, skill opera
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionprompt.credential_read · AGENTS.md:52
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- Do not read password managers, keychains, SSH keys, browser cookies, API keys, tokens, or verification codes.
Why
asks the agent to read credentials
Fix
—
INFOPrompt injectionprompt.credential_read · README.en.md:411
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- [Verified] Do not read credentials, cookies, browser sessions, or unrelated private logs.
Why
asks the agent to read credentials
Fix
—
INFOPrompt injectionprompt.credential_read · README.en.md:426
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
1. Store locally only. Do not upload anything or read browser cookies, tokens, or credentials.
Why
asks the agent to read credentials
Fix
—
INFOPrompt injectionprompt.credential_read · README.md:415
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
- [Verified] Do not read credentials, cookies, browser sessions, or unrelated private logs.
Why
asks the agent to read credentials
Fix
—
INFOPrompt injectionprompt.credential_read · README.md:430
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
1. Store locally only. Do not upload anything or read browser cookies, tokens, or credentials.
Why
asks the agent to read credentials
Fix
—

Audit 0.4.1 · source sha 220e40110f40 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherdongshuyan GitHub userOwner of the repository this skill is read from
  • Source folderdongshuyan/compass-skillsThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict220e40110f40A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Draft, audit, or minimally revise English- or Chinese-language academic prose to reduce formulaic, vacuous, mechanically repetitive, or process-leaking language while preserving claims, evidence strength, logical…

---
name: academic-humanizer
description: >-
  Draft, audit, or minimally revise English- or Chinese-language academic prose
  to reduce formulaic, vacuous, mechanically repetitive, or process-leaking
  language while preserving claims, evidence strength, logical relations,
  manuscript-wide terminology identity, document-level pattern variation, and
  scholarly register. Use for papers, abstracts, grants, cover letters, and
  reviewer responses when the user asks to de-AI, humanize, audit AI-like
  phrasing, or rewrite text without changing meaning. English is primary;
  Chinese is supported. Not for detector evasion, policy circumvention, pure
  translation, non-academic copy, or adding facts, citations, examples, or
  author experiences that the source does not contain.
---

# Academic Humanizer

Improve academic prose by removing observable writing defects, not by imitating
imperfection or optimizing an authorship detector. Preserve the author's facts,
argument, uncertainty, and disciplinary voice. This skill does not guarantee how
any reader or detector will classify a text.

## Portability

This skill is agent-agnostic. Its core behavior is defined by `SKILL.md` and
`references/`; Python is optional and supports reproducible diagnostics.

- Resolve `<skill-dir>` from the directory containing this `SKILL.md`.
- Let `<python>` mean an available Python 3 launcher, such as `python3`, `py -3`,
  or `python`.
- Let `<input-file>` mean a user-authorized local text file. Quote paths that
  contain spaces and use the host shell's path separator.
- Do not assume a fixed skill root, home directory, shell, operating system,
  agent name, or path separator.
- `agents/openai.yaml` is optional interface metadata. Core behavior does not
  depend on a particular agent runtime.
- If Python is unavailable, skip the scripts and apply the same contracts
  directly.

## Load the operating references

Read these before drafting or editing:

1. [Semantic contract](references/semantic-contract.md) for claim preservation,
   locked spans, deletion safety, and the internal claim ledger.
2. [Terminology contract](references/terminology-contract.md) for canonical terms,
   declared aliases, coined names, intentional distinctions, and the internal
   terminology ledger. Always load it for multi-span or manuscript-level work.
3. [Global pattern contract](references/global-pattern-contract.md) for the
   local-to-document audit, distribution map, scope limits, and whole-document
   repair. Always load it for multi-sentence work.
4. [Academic whitelist](references/whitelist-academic.md) for protected scholarly
   forms in both languages.
5. [Contrast logic](references/contrast-logic.md) for false-opposition triage in
   English and Chinese. Always load it; this is a cross-language semantic rule.
6. Route once by the majority language of editable prose, then read exactly one:
   [English rules](references/rules-en.md) or
   [Chinese rules](references/rules-zh.md).

Read [worked examples](references/examples.md) on first use, after changing a
rule, or whenever fact preservation, contrast, or over-correction is uncertain.
Read [metrics specification](references/metrics-spec.md) before running
`scripts/metrics.py`; its output is descriptive evidence only.

## Supported operations

- **generate**: draft from user-supplied claims, outline, data, and sources.
- **detect**: identify high-confidence defects without rewriting.
- **rewrite**: minimally revise supplied prose; this is the default when the user
  asks to de-AI or humanize text.
- **edit**: apply the same minimal revisions to a named file.

Do not create another routing tree for paper section or discipline. Methods,
Results, Discussion, reviewer responses, and grants use the same contracts; the
whitelist handles legitimate register differences. Ask one direct question only
when the requested genre changes what counts as acceptable and context does not
resolve it.

## Language route

Route on editable prose, excluding fenced code, formulas, block quotations, and
a trailing reference list. Use orthographic tokens: each CJK character is one
token and each contiguous Latin word is one token. This keeps embedded terms such
as `Transformer` or `ImageNet` from outweighing the Chinese sentence around them:

`r = CJK tokens / (CJK tokens + Latin word tokens)`

- `r >= 0.5`: Chinese branch.
- `r < 0.5`: English branch.
- No countable prose: stop and ask for text or an intended output language.

English terms in Chinese prose and Chinese terms in English prose remain
verbatim. If Python is available and the route is genuinely unclear, optionally
run `<python> "<skill-dir>/scripts/metrics.py" "<input-file>" --route`.
Routing is internal and never appears in the clean artifact.

## Single arbitration order

Earlier rows win. References may elaborate this table but must not define a
second priority order.

| Priority | Constraint | Operational meaning |
|---|---|---|
| **C0** | Artifact boundary | Process instructions, editor narration, and tool residue never enter the artifact. C0 applies only to process-layer text; it never authorizes deletion of real content. |
| **C1** | Semantic fidelity | Every output claim maps to the source bundle; every material source claim remains represented. No added facts, relations, examples, citations, motivations, or limitations. |
| **C2** | Locked-span protection | Quotations, formulas, code, references, citation keys, statistical notation, proper nouns, and requested verbatim text remain unchanged. |
| **C3** | Terminology identity | One scientific concept uses one canonical term across the editable manuscript. Preserve declared full-name/abbreviation pairs, necessary grammatical forms, and intentional distinctions; never infer identity from similarity alone. |
| **C4** | Academic register | Preserve functional hedging, passive voice, nominalization, discourse markers, and Chinese scholarly morphology. |
| **C5** | Argument structure | Pre

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 220e401

Download folder ↗
npx skills add . --list
npx skills add dongshuyan/compass-skills --skill '*' -a claude-code
npx skills add dongshuyan/compass-skills --list
npx skills add dongshuyan/compass-skills --skill '*' -a codex -a claude-code
npx skills add dongshuyan/compass-skills --skill clear-communication -a codex -a claude-code

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 220e40110f40 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 220e40110f40

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/dongshuyan/compass-skills/badge.svg)](https://modelsatlas.com/skills/dongshuyan/compass-skills/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

skills✓SAFE

zydo/skills

Use this skill for Python and TypeScript when a user wants to understand an unfamiliar API before coding against it — especially internal libraries, third-party SDKs, recently-upgraded dependencies, or APIs with…

★ 1Grade B
memory-bridge!CAUTION

ar9av/obsidian-wiki

Browse or compare wiki knowledge by originating AI tool. Use for cross-tool memory questions, tool-specific knowledge, or gap/diff analysis between Codex, Claude, Hermes, and other agents.

★ 3.6kGrade B
llm-wiki!CAUTION

ar9av/obsidian-wiki

Explain and apply the foundational LLM Wiki architecture and knowledge-management strategy. Use for setup, architecture, schema, or organization decisions; operational ingest/query/lint work uses dedicated skills.

★ 3.6kGrade B
hermes-history-ingest!CAUTION

ar9av/obsidian-wiki

Ingest Hermes agent history into Obsidian as distilled knowledge. Use for importing or mining ~/.hermes sessions, memories, or logs; use wiki-agent for targeted topic-only cross-agent recall.

★ 3.6kGrade B
impl-validator!CAUTION

ar9av/obsidian-wiki

Independently check whether an implementation matches its stated goal and return PASS/WARN/FAIL with actionable issues. Use for second-opinion validation of an implementation or generated output.

★ 3.6kGrade B
graph-colorize!CAUTION

ar9av/obsidian-wiki

Configure Obsidian graph colors by tag, folder, category, or visibility by updating .obsidian/graph.json. Use for graph colorization; preserve other graph settings and back up before changes.

★ 3.6kGrade B

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/dongshuyan/compass-skills/badge.svg)](https://modelsatlas.com/skills/dongshuyan/compass-skills/)

Questions about compass-skills

What does the compass-skills skill do?
司南:个性化 AI 任务总控 Skills 系统 /COMPASS: Personal Alignment Skills OS for AI Agents
Is compass-skills safe to install?
With care. The audit graded it B (89/100) and found 20 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can compass-skills access on my machine?
The audit observed that it reaches the network and reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.
Which assistants does compass-skills work with?
Its documentation mentions claude-code, codex, cursor and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (220e40110f40), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.