← All skills
directive
39 / 100 · High risk
Only if you trust the author.
By deftai/directive (GitHub) · other · 32 stars · scanned at commit d64615e
Works with any agent that supports SKILL.md skills.
Partially scanned — some files couldn't be read; we'll retry on the next scan
What this skill can do
Runs commands on your computer
This is disclosed by the author in the skill's SKILL.md or README.
Found in 214 places.
Show 17 more
- .codex/deft-hook-a598056e.mjs, line 10
import { spawnSync } from "node:child_process"; - .codex/deft-hook-a598056e.mjs, line 49
const r = spawnSync("git", ["-C", root, "ls-files", "--", rel], { - .codex/deft-hook-a598056e.mjs, line 89
const child = spawnSync(process.execPath, [pin, ...argv], { - .codex/hooks.json, line 8
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event session.start", - .codex/hooks.json, line 20
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event tool.before", - .codex/hooks.json, line 30
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event tool.before", - .codex/hooks.json, line 40
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event tool.before", - .codex/hooks.json, line 50
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event tool.before", - .codex/hooks.json, line 60
"command": "node .codex/deft-hook-a598056e.mjs --host codex --event tool.before", - .cursor/hooks.json, line 6
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event session.start", - .cursor/hooks.json, line 12
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event tool.before", - .cursor/hooks.json, line 18
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event tool.before", - .cursor/hooks.json, line 24
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event tool.before", - .cursor/hooks.json, line 30
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event tool.before", - .cursor/hooks.json, line 36
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event tool.before", - .cursor/hooks.json, line 44
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event session.compact", - .cursor/hooks.json, line 50
"command": "node .cursor/hooks/deft-hook-a598056e.mjs --host cursor --event prompt.submit",
and 194 more places
Downloads and installs other software
The author does not mention this.
Found in 294 places.
Show 17 more
- .deft/approved-scope/github.issue.5490635275.intent.json, line 11
"ImplementationPlan": "1. packages/types/src/resolution.ts 2. packages/types/src/resolution.test.ts 3. packages/core/src/doctor/main.ts 4. packages/core/src/res - .deft/approved-scope/github.issue.5490635275.intent.json, line 44
"title": "Issue #4718: bug(doctor): after successful update, within-window engine>pin still recommends npx update (ignores pnpm; pin/lock is the real gap)" - .deft/approved-scope/github.issue.5490635275.intent.json, line 102
"body": "model: grok-4.6\n```quarantined\nrole: triage\n```\n\ndesign-critique: warranted, because after a successful directive update, within-window engine>pin - .deft/approved-scope/github.issue.5490635275.intent.json, line 131
"body": "model: grok-4.6\n```quarantined\nrole: critic\n```\n\naudit-targets: none\n\nRound 1 refutation of: after content is already current, within-window eng - .deft/approved-scope/github.issue.5490635275.intent.json, line 160
"body": "model: grok-4.6\n```quarantined\nrole: parent\n```\n\n## In plain English\n\nAfter a successful deposit update, doctor still told the operator to run a - .deft/approved-scope/github.issue.5490635275.intent.json, line 189
"body": "model: grok-4.6\n```quarantined\nrole: critic\n```\n\naudit-targets: pain-P1\n\nPain-audit of `relieves: P1` on successor lean 5719231055. Pin-read `ed - .deft/approved-scope/github.issue.5490635275.intent.json, line 218
"body": "model: grok-4.6\n```quarantined\nrole: parent\n```\n\n## Verified-claims table\n\n| Claim | Verdict | Method |\n| --- | --- | --- |\n| After successful - .deft/approved-scope/github.issue.5490635275.intent.json, line 247
"body": "model: grok-4.6\n```quarantined\nrole: parent\n```\n\n## In plain English\n\nAfter a successful deposit update, doctor still told the operator to run a - .deft/approved-scope/github.issue.5715837932.intent.json, line 109
"body": "## Still reproduces on 0.121.0 (latest)\n\nUpgraded the consumer to Directive **0.121.0** (`npm i -g @deftai/directive@latest` + `directive update`; en - AGENTS.md, line 24
Same as managed `## Session-start ritual` below; substitute `task` for `deft` (`task session:start`, `task session:ready`, `task verify:session-ritual -- --tier - AGENTS.md, line 177
! If any `node_modules/@deftai/directive-runtime/` skill path here cannot be read (missing, stale, or a redirect stub), recover (AC9.7): `npm i -g @deftai/direc - AGENTS.md, line 186
! Opaque non-zero exit (usually 127) on every mutation = `deft-hook` is not executable on this host, not a Directive deny — no Directive code ran, and no in-ses - AGENTS.md, line 195
! **Read-only default** until mutation intent: load AGENTS.md / main.md / USER.md / `xbrief/PROJECT-DEFINITION.xbrief.json`; resolve USER.md via `deft session:s - AGENTS.md, line 199
! On **mutation** session start, run `deft session:start`; before code-writing or `start_agent` dispatch run `deft verify:session-ritual -- --tier=gated` (stale - CONTRIBUTING.md, line 145
launcher: `npm i -g @deftai/directive`, then `directive install` / `directive install --repair`. - CONTRIBUTING.md, line 239
> `npm i -g @deftai/directive` then `directive install` / `upgrade` / - README.md, line 6
> 1. **Launcher on PATH?** Run `directive --version` / `deft --version`. If missing or broken: `npm i -g @deftai/directive` (or `pnpm add -g @deftai/directive`
and 274 more places
Sends data to these websites: agentuity.sh, agentuity-runtime, my-app.awsapprunner.com, aka.ms, fly.io, my-app.fly.dev, ${{, my-app.internal, api.vercel.com
This is disclosed by the author in the skill's SKILL.md or README.
Found in 52 places.
Show 17 more
- content/deployments/agentuity/via-cli.md, line 18
curl -fsS https://agentuity.sh | sh - content/deployments/agentuity/via-cli.md, line 28
curl -fsS https://agentuity.sh | sh - content/deployments/agentuity/via-cli.md, line 364
curl -fsS https://agentuity.sh | sh - content/deployments/agentuity/via-github-actions.md, line 75
curl -fsS https://agentuity.sh | sh - content/deployments/agentuity/via-github-actions.md, line 490
curl -f ${{ steps.deploy.outputs.url }}/health || exit 1 - content/deployments/agentuity/via-github-actions.md, line 650
curl -f ${{ steps.deploy.outputs.url }}/health - content/deployments/agentuity/via-vpc.md, line 566
wget -O- http://agentuity-runtime:3500/health - content/deployments/aws/via-app-runner.md, line 569
curl https://my-app.awsapprunner.com/health - content/deployments/azure/via-app-service.md, line 30
curl -L https://aka.ms/InstallAzureCli | bash - content/deployments/azure/via-functions.md, line 56
curl http://localhost:7071/api/HttpTrigger - content/deployments/fly-io/via-flyctl.md, line 23
curl -L https://fly.io/install.sh | sh - content/deployments/fly-io/via-flyctl.md, line 30
curl -L https://fly.io/install.sh | sh - content/deployments/fly-io/via-github-actions.md, line 527
STATUS_CODE=$(curl -s -o /dev/null -w "%{http_code}" https://my-app.fly.dev/health) - content/deployments/fly-io/via-github-actions.md, line 679
curl -f https://${{ env.FLY_APP_NAME }}.fly.dev/health || ( - content/deployments/fly-io/via-multi-region.md, line 370
fly ssh console -C "curl -w '%{time_total}' https://my-app.internal/health" - content/deployments/vercel/via-api.md, line 8
curl -X POST https://api.vercel.com/v13/deployments \ - content/languages/javascript.md, line 114
const res = await fetch(`/api/users/${id}`, { signal: AbortSignal.timeout(5000) });
and 32 more places
Reads your saved credentials, such as SSH keys or .env files
The author does not mention this.
Found in 1 place.
Can call paid AI services billed to you
The author does not mention this.
Found in 1 place.
Changes files outside its own folder
The author does not mention this.
Found in 11 places.
Show 8 more
Safer alternatives
Low-risk skills in the same category (other) that look related. Check that one does what you need.
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'directive' ] || [ -L ~/.agents/skills/'directive' ]; then echo 'A skill folder named directive already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/deftai/directive' "$d" && git -C "$d" checkout --quiet 'd64615ee1074908fe26ebfc49eb766a3a0c18b06' -- '.' && mkdir -p ~/.agents/skills && cp -R "$d/." ~/.agents/skills/'directive' && rm -rf ~/.agents/skills/'directive'/.git && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'directive' ~/.claude/skills/'directive' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for deftai/directive shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/deftai/directive/)
Score history
| Date | Version | Score |
|---|
| 2026-11-13 | d64615e | 39 |
| 2026-11-09 | 164fe7a | 39 |