Index of every page on this site: llms.txt
All skills
tw93 avatar

/think

@840f926
by tw93tw93/waza7.4k stars
423
Run it yourself

Turns rough ideas into approved, decision-complete plans before coding. Use when planning architecture, judging whether to build, or writing a handoff. Not for bug fixes or small edits.

Requires /hunt
Use this Skill: https://skilld.dev/gh/tw93/waza/think

Nothing lands on disk. Nothing to clean up.

Fork this Skill

Edit a local copy. It keeps the author and licence.

referencesdurable-context.md

≈511 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Durable Context Preflight

Shared preamble for every skill that reads optional memory or prior-decision context. Each SKILL.md links to this file and then adds skill-specific guidance.

Scope

Read durable context when the user names memory, a prior decision, or a memory path, or when the project exposes an obvious local memory summary (a MEMORY.md or a documented memory directory). List titles first and open at most one or two summaries; do not hard-code machine-specific memory roots, and do not read raw transcripts. Treat cross-project entries as transferable patterns, not as facts about this project.

Current state wins

Current code, diff, screenshots, logs, tests, docs, CI, remote state, and live probes always override memory, including memory the runtime injects on its own. A remembered fact is a lead to re-verify, never evidence. When current state conflicts with a remembered claim, name the conflict and follow current state.

Memory is not authorization

Memory may explain preferences, but it must never grant or broaden authorization for writes, commits, pushes, publishing, public replies, deletion, or other state changes. Live task instructions and current project rules decide authorization, including explicit authorization still in force for the same unfinished goal. Historical phrases such as push or check are context to re-evaluate, not reusable action tokens.

Redaction gate

When turning prior chats, durable memory, or cross-project notes into reusable Waza guidance, promote only workflow rules. Strip raw transcript text, screenshots, local paths, project-specific commands, issue or PR numbers, release tags, commit hashes, private product boundaries, paid or license details, support routing, user names, and one-machine state.

If an example is necessary, use neutral placeholders such as ExampleCLI, ExampleApp, <issue>, <release>, or <command>. Do not copy a private answer, maintainer reply, screenshot observation, or project-specific incident as a durable rule.

Source: SKILL.md on GitHub

No rule matched.

skilld matched fixed text patterns in SKILL.md and file names. Patterns miss obfuscated code.

skilld run checks every file with the same patterns. It asks for approval before it loads a Skill with a behavior marked Needs approval.

1 alert17d4 checks · Risk HIGH
  • Gen Agent Trust Hub17d

    The skill facilitates architectural planning and decision validation but introduces security risks by instructing the agent to access sensitive configuration files. Specifically, it directs the agent to read local files like `.env` to 'lift live values' for environment variables and API tokens. Additionally, the skill processes various external data sources such as public documentation and issue threads, creating a surface for indirect prompt injection attacks.

  • Socket17d

    No alerts

  • Snyk17d

    Risk: LOW · No issues

  • ZeroLeaks6mo

    Score: 93/100 · 2 sections analyzed

Signed by skilld at 840f926. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 6 days ago.

Activeupdated 3 weeks ago
Other metadata
when_to_use
出方案, 给方案, 怎么设计, 用什么方案, 有没有必要, 值不值得, what's the best approach, plan this, how should I, should we keep this
dispatch_intent
New feature, architecture, how should I design this, value judgment, executable plan, handoff

README badge

README badge for tw93/waza/think