Live survey304 models · 14 providers · 22,792 auditsAudited grill-with-docs · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

Pipeline Router

skill · WILLOSCAR/research-units-pipeline-skillsLicence not declaredAudited 19 Oct 2026 · source 81994516a430

★ 513pushed 14 days ago
✓SAFEGrade B · 89/100 · 19 Oct 2026 · 8199451
513repo stars · whole WILLOSCAR/research-units-pipeline-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 81994516a430 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Route an unbound research Goal to one Workflow or materialize its initial C0 kickoff block; use during initial binding, not for later checkpoint summaries or approval.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “Pipeline Router (WILLOSCAR/research-units-pipeline-skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/willoscar/pipeline-router

Trust audit

Audit 0.4.1 · source read 19 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high1 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN2
L1 Static sourceSecrets, path traversal, supply chain, hidden codePASS0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass, no license.

Findings (2)

LOWInventory / provenanceinv.no_license
F-13 Inventory / provenanceCWE-1104Layer L0
Why
no LICENSE file and no repo licence
Fix
add a licence

Audit 0.4.1 · source sha 81994516a430 · 19 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • PublisherWILLOSCAR GitHub userOwner of the repository this skill is read from
  • Source folderWILLOSCAR/research-units-pipeline-skills/.codex/skills/pipeline-routerThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdict81994516a430A new audit runs when the source changes
  • Repository statusNot archivedLast push 14 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Route an unbound research Goal to one Workflow or materialize its initial C0 kickoff block; use during initial binding, not for later checkpoint summaries or approval.

---
name: pipeline-router
description: Route an unbound research Goal to one Workflow or materialize its initial C0 kickoff block; use during initial binding, not for later checkpoint summaries or approval.
---

# Pipeline Router

Routing is a **commitment**: select one Workflow from the desired Artifact and
evidence method, record that choice, and expose the next human Decision.

## Inputs

- `GOAL.md`, or the current user request when the Workspace is new.
- Existing `PIPELINE.lock.md`, `UNITS.csv`, `STATUS.md`, and `DECISIONS.md` when
  present.
- `docs/PIPELINE_TAXONOMY.md` and candidate Pipeline front matter during
  selection.

## Outputs

- `PIPELINE.lock.md` for a newly bound Goal.
- The initial C0 checkpoint block in `DECISIONS.md`.
- `queries.md` when the selected retrieval Workflow starts at C0.
- A synchronized current Pipeline/checkpoint projection in `STATUS.md`.

## Steps

### 1. Establish the requested Artifact

Read the Goal and identify:

- the reader-facing deliverable;
- the evidence method it requires;
- the requested format or delivery profile;
- the decisions that materially change Workflow selection.

When a routing discriminator is missing, write the smallest grouped question
set to `DECISIONS.md` and stop at that Decision.

Completion criterion: every fact that can change the Workflow choice is known
or explicitly bounded in `DECISIONS.md`.

### 2. Select one Workflow

Load `docs/PIPELINE_TAXONOMY.md`, then inspect only the candidate Pipeline
contracts. Choose from target Artifact and evidence method rather than keyword
matching alone. Treat delivery profiles and course-report use cases as overlays
inside their existing Workflow family.

Completion criterion: exactly one executable Pipeline is selected and its
target Artifacts match the Goal.

### 3. Materialize the commitment

Write `PIPELINE.lock.md` with:

```text
pipeline: <pipeline path>
units_template: <template path from Pipeline front matter>
locked_at: <YYYY-MM-DD>
```

Initialize `UNITS.csv` from that template when the Workspace is new. Preserve a
valid existing lock; a route change is an explicit operator Decision followed
by reinitialization or migration, never a silent rewrite.

Completion criterion: the lock, Unit template, and Workspace projection refer
to the same Pipeline.

### 4. Expose the C0 checkpoint

Materialize the C0 kickoff block and approval checkbox in `DECISIONS.md`. Seed
`queries.md` from the Goal when retrieval is part of the selected Workflow.
Later checkpoints use `checkpoint-brief`. Historical Workspaces whose saved
Unit still invokes `pipeline-router` after C0 are delegated to
`checkpoint-brief` with a deprecation warning; the router never approves them.

The deterministic helper may be used after selection:

```bash
uv run python .codex/skills/pipeline-router/scripts/run.py \
  --workspace workspaces/<name> \
  --checkpoint C0
```

Completion criterion: `DECISIONS.md` contains the C0 checkpoint and one
clear approval or answer surface; retrieval Workflows have a non-empty C0 query
seed.

### 5. Verify the route

Check that the locked Pipeline exists, its Unit template exists, and the active
checkpoint is represented in both `STATUS.md` and `DECISIONS.md`.

Completion criterion: the Pipeline Runner can continue from Workspace files
without making another routing inference.

## Context Pointers

- Read `docs/PIPELINE_TAXONOMY.md` only while selecting or deliberately changing
  a Workflow.
- After selection, the locked `pipelines/*.pipeline.md` is the execution
  contract and the taxonomy leaves context.
- Use `assets/pipeline-selection-form.md` only when missing routing facts require
  a human answer.
- Run the helper with `--help` when C0 materialization needs debugging; the
  helper records the initial route projection but does not choose one.

Excerpt, first 3,824 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 8199451

Download folder ↗
uv run python .codex/skills/pipeline-router/scripts/run.py \

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 81994516a430 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CodexMentioned in its text, not testedSkills for Codex · About Codex
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 81994516a430

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/willoscar/pipeline-router/badge.svg)](https://modelsatlas.com/skills/willoscar/pipeline-router/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/willoscar/pipeline-router/badge.svg)](https://modelsatlas.com/skills/willoscar/pipeline-router/)

Questions about Pipeline Router

What does the Pipeline Router skill do?
Research pipelines as semantic execution units: each skill declares inputs/outputs, acceptance criteria, and guardrails. Evidence-first methodology prevents hollow writing through structured intermediate artifacts.
Is Pipeline Router safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Pipeline Router access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Pipeline Router work with?
Its documentation mentions codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (81994516a430), read on 2026-10-19. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.