The full skill instructions and embedded helper script are in skills/pdf2plot.md at the root of this repository. Read that file now and follow its instructions.
cursor-rule
SECI-symlink-resolution
ANo problem foundjposluns/guardrails
Code the assistant writes that opens, reads, or writes a filesystem path with elevated privilege resolves that path safely against a symbolic-link race rather than trusting the name it was given. It resolves each path component beneath a pre-opened directory handle, using the platform's containment primitive where one exists, refusing to follow a symbolic link or to escape above the anchoring directory, so an attacker who swaps a component for a link between the check and the use cannot redirec…
SECI-symlink-resolution got grade A on our automated scan on 2026-10-25.
Before you install
- Read any scripts this skill ships.
- Note every URL it fetches.
- Check allowed-tools and hooks.
Embed this grade
Add this badge to your README. It shows the current grade from CheckSkills.
Report this skill if the grade looks wrong, or if something slipped through.
Related
Run all code generation (protobuf, sqlc, frontend build)
name: ship description: Release protocol: pre-flight checks, changelog, semantic version, tag, deploy. disable-model-invocation: true
name: init description: Bootstrap the .resonance/ project memory (soul, state, docs scaffold). Run once per new project. disable-model-invocation: true
name: goal description: The autonomous goal loop: frame, decompose, then build and verify each slice against real checks, bounded, never auto-ship. disable-model-invocation: true