Agent skill · Audited from source

Bernstein Create Task

skill · sipyourdrink-ltd/bernsteinApache-2.0 licenceAudited 14 Oct 2026 · source 6ba64a7d2489

★ 1,237pushed today
!CAUTIONGrade B · 89/100 · 3 findings · 6ba64a7
1,237repo stars · whole sipyourdrink-ltd/bernstein

Is it safe? With care — CAUTION, grade B (89/100). We read this skill's source at commit 6ba64a7d2489 and observed network access and no hard-coded secrets. The audit raised 3 findings, 0 critical or high. What it does: Create a new task in the Bernstein orchestrator. Use when the user wants to add a task, delegate work to an agent, file a bug fix, or queue up work for the orchestrator to handle.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Bernstein Create Task (sipyourdrink-ltd/bernstein)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-create-task

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100!CAUTION B
0 critical0 high2 medium0 low1 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkUndeclared2 observations, not in its own description
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeWARN2
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS1
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (3)

MEDIUMNetwork egressnet.cli · scripts/create-task.sh:35
F-04 Network egressCWE-200 · CWE-319Layer L1
curl -sf "${HEADERS[@]}" -X POST "$API/tasks" -d "$BODY" 2>/dev/null || {
Why
No further detail recorded for this rule.
Fix
—
MEDIUMNetwork egressnet.raw_ip · scripts/create-task.sh:6
F-04 Network egressCWE-200 · CWE-319Layer L1
API="${BERNSTEIN_API_URL:-http://127.0.0.1:8052}"
Why
No further detail recorded for this rule.
Fix
—
INFOPrompt injectionscope.undeclared_network · <declared scope>
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
network use found in code, not declared in the description
Why
the description does not admit a capability the code has
Fix
declare network use in the description, or remove it

Audit 0.4.1 · source sha 6ba64a7d2489 · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishersipyourdrink-ltd GitHub organizationOwner of the repository this skill is read from
  • Source foldersipyourdrink-ltd/bernstein/packages/cursor-plugin/skills/bernstein-create-taskThe exact folder we audited
  • LicenceApache-2.0As the repository states it
  • Commit pinned for this verdict6ba64a7d2489A new audit runs when the source changes
  • Repository statusNot archivedPushed today
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Create a new task in the Bernstein orchestrator. Use when the user wants to add a task, delegate work to an agent, file a bug fix, or queue up work for the orchestrator to handle.

---
name: bernstein-create-task
description: >
  Create a new task in the Bernstein orchestrator. Use when the user wants to
  add a task, delegate work to an agent, file a bug fix, or queue up work
  for the orchestrator to handle.
---

# Create Bernstein Task

Create a new task in the Bernstein orchestrator and have it picked up by an agent.

## When to Use

- User says "create a task for..." or "add this to bernstein"
- User wants to delegate a coding task to an agent
- User describes a bug fix, feature, or refactor that should be orchestrated
- User says "have an agent do this" or "queue this up"

## Instructions

1. Ask the user (if not already clear) for:
   - **Title**: short description of the task
   - **Role**: one of `backend`, `frontend`, `qa`, `security`, `devops`, `docs` (default: `backend`)
   - **Priority**: 0 (urgent) to 3 (low) (default: 1)
   - **Scope**: `tiny`, `small`, `medium`, `large` (default: `small`)

2. Run `scripts/create-task.sh` with the task details:
   ```bash
   scripts/create-task.sh "Fix the auth middleware to handle expired tokens" backend 1 small
   ```

3. Show the created task ID and confirm it's queued:
   ```
   Task TASK-042 created (role=backend, priority=1)
   An agent will pick it up shortly.
   ```

4. If the user wants to track it, suggest using `/bernstein-status`.

## Tips

- For complex tasks, suggest breaking them into smaller subtasks
- For risky changes, add `--require-review` flag
- High-priority (0) tasks get picked up immediately

Excerpt, first 1,510 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 6ba64a7

Download folder ↗
git clone https://github.com/sipyourdrink-ltd/bernstein
git -C bernstein checkout 6ba64a7d2489

The author documents no install command, so this uses the repository directly. Our verdict covers commit 6ba64a7d2489 only.

Works in

The author has not said which agents this skill supports, and we have not tested it in any.

Audit history

Every audit, every source change

  1. !CAUTION B 89 / 100

    first audit · source 6ba64a7d2489

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-create-task/badge.svg)](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-create-task/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-create-task/badge.svg)](https://modelsatlas.com/skills/sipyourdrink-ltd/bernstein-create-task/)

Questions about Bernstein Create Task

What does the Bernstein Create Task skill do?
The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run
Is Bernstein Create Task safe to install?
With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can Bernstein Create Task access on my machine?
The audit observed that it reaches the network. At least one of those is not mentioned in its own description, which is itself a finding. Secrets in the source: none found.
How current is this page?
The grade is for one exact copy of the source (6ba64a7d2489), read on 2026-10-14. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.