Skip to content

Add source text safety guardrail - #5

Open
BenRoe wants to merge 1 commit into
kangarooking:mainfrom
BenRoe:source-text-safety-guardrail
Open

BenRoe wants to merge 1 commit into
kangarooking:mainfrom
BenRoe:source-text-safety-guardrail

Conversation

@BenRoe

@BenRoe BenRoe commented May 13, 2026

Copy link
Copy Markdown

Summary

Adds an explicit safety boundary to treat books, articles, OCR, metadata, encoded text, and other source material as untrusted data rather than agent instructions.

Why this is needed

The skill distills arbitrary user-provided source text into executable agent skills. That source text may contain prompt injections or hidden instructions, including OCR noise, encoded text, comments, or unusual formatting. Without an explicit guardrail, those instructions could be accidentally copied into generated skill triggers or execution steps.

Changes

  • Clarifies that source text must not override system/developer/user instructions.
  • Prohibits leaking secrets, reading unrelated files, running commands, or following source-embedded instructions.
  • Requires suspicious prompt-injection content to be recorded only in rejected/ or audit notes.

Kiasma1 added a commit to Kiasma1/cangjie-skill that referenced this pull request Jul 5, 2026
… (2026-07 实战复盘)

SKILL.md:
- add '阶段 -1: PDF 体检' with text/scan/markitdown decision matrix
- add density sampling table (文字密集 90% / 表格 40% / 图鉴 5% strategy)
- add '产出路径分支决策' (路径 A:skill / 路径 B:md 手册 / 路径 C:both)
- expand '调用惯例' with 5 个实战复盘教训
- add '时间预算参考' 与 '一旦出错的止损规则'
- 输入要求新增 '期望产出形态' 必问项

00-overview.md:
- 第七节 '实战经验' (2026-07 蒸馏复盘): 5 张教训表 + 证实的 5 个教训 + 一句话结论

01-stage0-adler.md:
- 常见失败模式加两条实战教训(kangarooking#4 没问产出路径 / kangarooking#5 没先体检)
- 加 '相关参考' 提醒阶段 0 开始前走体检、阶段 0 后立刻问路径

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant