lythoskill-deck
Manages skill governance by syncing declared skills with the working set, ensuring only necessary skills are active and conflicts are eliminated.
Install this skill
or
91/100
Security score
The lythoskill-deck skill was audited on Jul 31, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 43
Access to home directory dotfiles
SourceSKILL.md
| 41 | |
| 42 | ``` |
| 43 | Cold Pool (~/.agents/skill-repos/) → deck add → skill-deck.toml → deck link → .claude/skills/ |
| 44 | (all downloaded skills) (declare) (desired state) (reconcile) (working set — what agent sees) |
| 45 | ``` |
low line 53
Access to home directory dotfiles
SourceSKILL.md
| 51 | ```bash |
| 52 | # Phase 1 — brand design |
| 53 | deck link --deck phase1-brand.toml --cold-pool ~/.agents/skill-repos |
| 54 | |
| 55 | # Phase 2 — content creation (atomic switch, Phase 1 skills gone) |
low line 56
Access to home directory dotfiles
SourceSKILL.md
| 54 | |
| 55 | # Phase 2 — content creation (atomic switch, Phase 1 skills gone) |
| 56 | deck link --deck phase2-content.toml --cold-pool ~/.agents/skill-repos |
| 57 | |
| 58 | # Done — restore parent deck |
low line 71
Access to home directory dotfiles
SourceSKILL.md
| 69 | [deck] |
| 70 | max_cards = 8 |
| 71 | cold_pool = "~/.agents/skill-repos" |
| 72 | working_set = ".claude/skills" |
| 73 |
medium line 133
Access to home directory dotfiles
SourceSKILL.md
| 131 | | Concept | One-liner | |
| 132 | |---------|-----------| |
| 133 | | Cold Pool | All downloaded skills (`~/.agents/skill-repos/`). Agent cannot see here. | |
| 134 | | skill-deck.toml | Declares desired state. Alias-as-key dict format. | |
| 135 | | deck link | Reconciler. Makes the working set match the declaration. | |
Scanned on Jul 31, 2026
View Security Dashboard