Agent skill · Audited from source
loop-me
skill · vinvcn/mattpocock-skills-zh-cnMIT licenceAudited 31 Oct 2026 · source 72a124f48772
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 72a124f48772 and found no filesystem, network or shell access and no hard-coded secrets. What it does: 在这个工作区中,就我想构建的工作流规格访谈我。
Cite
Cite this page
ModelsAtlas. “loop-me (vinvcn/mattpocock-skills-zh-cn)”. Retrieved 31 Oct 2026. https://modelsatlas.com/skills/vinvcn/loop-me
Trust audit
Audit 0.4.1 · source read 31 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha 72a124f48772 · 31 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishervinvcn GitHub userOwner of the repository this skill is read from
- Source foldervinvcn/mattpocock-skills-zh-cn/skills/in-progress/loop-meThe exact folder we audited
- LicenceMITAs the repository states it
- Commit pinned for this verdict72a124f48772A new audit runs when the source changes
- Repository statusNot archivedLast push 3 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: 在这个工作区中,就我想构建的工作流规格访谈我。
--- name: loop-me description: 在这个工作区中,就我想构建的工作流规格访谈我。 disable-model-invocation: true argument-hint: "一个待设计的工作流;也可以留空,让我去找一个" --- 调用 Skill 工具并指定 `grilling`,运行一个 stateful session,唯一输出是 **workflow** specs。使用 grilling discipline:持续追问、一次一个问题、每个问题都附推荐答案。围绕下面的 vocabulary 和 goal 来访谈。随着 grilling 解决问题,创建、编辑、删除 specs。 ## The loop lens **Loop** 是用户生活中的重复模式:career、week、morning,或单个重复活动。把生活看成 loops within loops,会揭示活动到底有多 predictable,也因此揭示哪些值得 **delegating**。用这个 lens 找到值得写 spec 的 loops,并提出用户尚未注意到的 loops。 **Workflow** 是一个 loop 的 spec,并让它变得可执行。你在 loop 上运行 workflow;loop 是它的运行实例。Workflows 存在 `workflows/*.md` 中,并作为 source of truth。 ## Vocabulary 只有当 workflow 需要时才使用 shared language;它不是 checklist。**不要强制任何结构**:除非 grilling 表明需要,否则 workflow 不需要 AI、不需要 checkpoint,也不需要 schedule。 - **Trigger** - 每次运行的触发物:一个 **event**(新 email、新 issue)或一个 **schedule**(每天早晨)。Event-triggering 通常更高效。 - **Checkpoint** - human-in-the-loop 点,用户在这里验证或决策。有些 workflows 没有 checkpoint,可自主运行;有些完全不使用 AI。 - **Push right** - 尽可能延后 checkpoint。在涉及人之前先完成最大量工作,让用户只被晚些时候问一次,并且一切都已准备好。 - **Brief** - checkpoint 展示的内容:紧凑、decision-ready 的 summary,说明产出了什么、为什么、并链接到底层 asset;永远不是 raw output。用户读 brief,不读 draft。Review 速度至关重要。 ## Definition of done 当 implementer agent 能在不问任何问题的情况下构建它时,workflow spec 才算 done。持续 grilling 到那时;只要还有问题,就不算完成。 ## The workspace - `workflows/*.md` - 每个 workflow 一个 spec。 - `NOTES.md` - 关于用户世界的 raw notes:他们使用的 tools、处理的 channels,以及他们对两者的自有术语。当它为空或很薄时,先访谈用户的世界,再写任何 spec。随着 fuzzy terms 浮现,把它们打磨成 canonical terms,并记录在这里。
Excerpt, first 1,496 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 72a124f
git clone https://github.com/vinvcn/mattpocock-skills-zh-cn git -C mattpocock-skills-zh-cn checkout 72a124f48772
The author documents no install command, so this uses the repository directly. Our verdict covers commit 72a124f48772 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
72a124f48772
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/vinvcn/loop-me/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →vinvcn/mattpocock-skills-zh-cn
扫描代码库中的深化机会,生成可视化 HTML 报告,然后围绕你选中的候选项继续追问。
vinvcn/mattpocock-skills-zh-cn
把当前对话压缩成交接文档,让另一个代理接手。
vinvcn/mattpocock-skills-zh-cn
基于 spec 或 ticket 集合实现一段工作。
vinvcn/mattpocock-skills-zh-cn
一个用来打磨计划或设计的持续追问式访谈,并在过程中创建文档(ADRs 和词汇表)。
vinvcn/mattpocock-skills-zh-cn
围绕计划、decision 或 idea 持续追问用户。适用于用户想对自己的思路做压力测试,或使用任何 “grill” 触发措辞时。
vinvcn/mattpocock-skills-zh-cn
一个用来打磨计划或设计的持续追问式访谈。
Add this badge to your README
[](https://modelsatlas.com/skills/vinvcn/loop-me/)
<a href="https://modelsatlas.com/skills/vinvcn/loop-me/"><img src="https://modelsatlas.com/skills/vinvcn/loop-me/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about loop-me
What does the loop-me skill do?
Is loop-me safe to install?
What can loop-me access on my machine?
How current is this page?
Sources
- github.com/vinvcn/mattpocock-skills-zh-cn/tree/main/skills/in-pr — the audited source at commit 72a124f48772 and every finding aboveObserved · 31 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the loop-me skill do?
- Is loop-me safe to install?
- What can loop-me access on my machine?