Agent skill · Audited from source

Tutorial Selfloop

skill · WILLOSCAR/research-units-pipeline-skillsLicence not declaredAudited 14 Oct 2026 · source 81994516a430

★ 514pushed 9 days ago

✓SAFEGrade B · 89/100 · 14 Oct 2026 · 8199451

514repo stars · whole WILLOSCAR/research-units-pipeline-skills

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 81994516a430 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Run a tutorial-specific quality gate and write a PASS/FAIL report for the final tutorial deliverable.

Ask an AI about this pageGChatGPT CClaude PPerplexity GeGemini XGrok

CoCopilot AIGoogle AI Mode

Cite

Cite this page

ModelsAtlas. “Tutorial Selfloop (WILLOSCAR/research-units-pipeline-skills)”. Retrieved 14 Oct 2026. https://modelsatlas.com/skills/willoscar/tutorial-selfloop

Trust audit

Audit 0.4.1 · source read 14 Oct 2026

Trust score89/100✓SAFE B

0 critical0 high1 medium1 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.

What the source does

FilesystemNone observedNo reads or writes in the source
NetworkNone observedNo outbound calls in the source
ShellNone observedNo commands run in the source
DependenciesPinnedNothing floats
SecretsNone foundNo keys in source

Five audit layers

Layer	What we check	Result	Findings
`L0` Provenance	Repo owner, licence, archive status, activity	WARN	2
`L1` Static source	Secrets, path traversal, supply chain, hidden code	PASS	0
`L2` Instructions	Prompt injection, authority framing, hidden directives	PASS	0
`L3` Inventory	The files and declarations match the source	PASS	0
`L4` Sandbox	Run in isolation and watch behaviour	SKIPPED why	0

Gates applied: no behavioural pass, no license.

Findings (2)

MEDIUMInventory / provenanceinv.symlink · .claude/skills

F-13 Inventory / provenanceCWE-1104Layer L0

.claude/skills

Why: link not followed
Fix: —

LOWInventory / provenanceinv.no_license

F-13 Inventory / provenanceCWE-1104Layer L0

Why: no LICENSE file and no repo licence
Fix: add a licence

Audit 0.4.1 · source sha 81994516a430 · 14 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

PublisherWILLOSCAR GitHub userOwner of the repository this skill is read from
Source folderWILLOSCAR/research-units-pipeline-skills/.codex/skills/tutorial-selfloopThe exact folder we audited
LicenceNot declaredAs the repository states it
Commit pinned for this verdict81994516a430A new audit runs when the source changes
Repository statusNot archivedLast push 9 days ago
Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Run a tutorial-specific quality gate and write a PASS/FAIL report for the final tutorial deliverable.

---
name: tutorial-selfloop
description: "Run a tutorial-specific quality gate and write a PASS/FAIL report for the final tutorial deliverable."
---

# Tutorial Self-Loop

## Triggers & routing

- **Trigger**: tutorial self-loop, tutorial quality gate, tutorial pass/fail, 教程自循环, 教程质量门.
- **Use when**: `source-tutorial` 的 C3,已经有 `output/TUTORIAL.md`,想在交付前确认它满足教程合同而不是普通长文。
- **Skip if**: 还没有 tutorial 正文。
- **Network**: none.
- **Guardrail**: 报告缺口时不要发明内容;把失败清楚地路由回 tutorial 写作阶段。


Goal: converge the tutorial deliverable to a stable teaching-quality bar.

The gate should compare `output/TUTORIAL.md` against the intended module shape from `outline/module_plan.yml`, rather than acting like a generic prose checker.

## Inputs

- `output/TUTORIAL.md`
- `outline/module_plan.yml`

## Outputs

- `output/TUTORIAL_SELFLOOP_TODO.md`

## Checks

- reader orientation section exists
- at least one real module exists
- each module has teaching components, not just a block of prose
- source notes are visible but lightweight

## Script

### Quick Start

- `uv run python .codex/skills/tutorial-selfloop/scripts/run.py --workspace <workspace>`

### All Options

- `--workspace <dir>` (required)
- `--unit-id <U###>`
- `--inputs <semicolon-separated>`
- `--outputs <semicolon-separated>`
- `--checkpoint <C#>`

### Examples

- Run the tutorial gate:
  - `uv run python .codex/skills/tutorial-selfloop/scripts/run.py --workspace <workspace>`

Excerpt, first 1,434 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 8199451

Download folder ↗

git clone https://github.com/WILLOSCAR/research-units-pipeline-skills
git -C research-units-pipeline-skills checkout 81994516a430

The author documents no install command, so this uses the repository directly. Our verdict covers commit 81994516a430 only.

Works in which agents?

What its own text says, not a test

“Mentioned” means the skill’s text names the agent. We have not run it there.
Agent	Status	More
Codex	Mentioned in its text, not tested	Skills for Codex · About Codex

Audit history

Every audit, every source change

2026-10-14
✓SAFE B 89 / 100
first audit · source 81994516a430

README badge

For maintainers · shows the latest audit

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/willoscar/tutorial-selfloop/badge.svg)](https://modelsatlas.com/skills/willoscar/tutorial-selfloop/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.