example-cleanlisted

# Example: Clean Skill A minimal skill demonstrating safe defaults. It does one job — count words in a file — and asks for nothing more than what it strictly needs. ## Step 0 — Validate input ```bash FILE_PATH="$1" test -f "$FILE_PATH" || { echo "FILE_NOT_FOUND: $FILE_PATH"; exit 1; } test ! -L "$FILE_PATH" || { echo "REFUSING_SYMLINK: $FILE_PATH"; exit 1; } ``` ## Step 1 — Count words ```bash wc -w "$FILE_PATH" ``` ## Step 2 — Report Tell the user the count in plain prose. --- ## Why this passes audit - `disable-model-invocation: true` — only invoked by user - `context: fork`, `agent: general-purpose` — standard, isolated - `allowed-tools` is narrow: only the specific commands actually used (`wc -w`, `test`, `echo`) - Input validation: existence + symlink rejection - No network calls, no writes, no sensitive paths read - Description matches behavior exactly