security-audit trial: host install read-back and M5b gate 1 (65/65 upstream tests) - #452

Scope

• Records the M5a host install of cloudflare/security-audit-skill at c1c8a8c on one host. The trial row came from Skills trial: cloudflare/security-audit-skill name-only for LLM-native automation; stale-upstream flags; sandbox-profile open gate #448, merged as 8315274f.
• Records the first M5b gate: the unchanged upstream node --test, 65 of 65 passing.
• New receipt: evidence/artifacts/security-audit-host-install-20260928/, containing receipt.json, README.md and the raw node-test.txt.
• In docs/decisions/2026-09-25-skills-trial-and-usage.md, the evidence table's live-run-pending row is split into three:
  • install and read-back (done);
  • M5b gate 1 (done);
  • invocation reach, M5b gates 2 and 3, M5c and the sandbox (still pending).
• Base commit: 8315274f.
• Lane: lane:foundation.

Evidence classes

• upstream-unchanged:
  • the skill's own validator tests at the pin;
  • Claude Code 2.1.283's own /skill-doctor listing read-back.
• our-integration:
  • install_skills.py (driving skills CLI 1.7.0);
  • skills_status.py;
  • the single-key skillOverrides edit;
  • the Codex enabled = false block.
• Nothing here is a model run or an audit result. M5c decides merit.

Recorded deviation

The decision says the Codex table goes in before the install. It went in 10 s after it. The Claude name-only override went in first, as planned.

SOTA sources

• cloudflare/security-audit-skill at c1c8a8c1471069fb0e188eeaff69b8e8db6564a8. Its tests and validators were compared byte for byte against gh api raw content at the pin.
• Vercel skills CLI 1.7.0, the pinned upstream installer, driven by tools/adoption/install_skills.py.
• Claude Code skills docs (https://code.claude.com/docs/en/skills): the skillOverrides visibility table.

Checklist

• python3 scripts/validate.py passed. tests.test_skills_manifest and tests.test_adoption_docs_consistency passed (1 skip).
• No secrets, host paths or client config contents committed. ~ is a placeholder.
• Peers native-agent-stack-a9 and token-save-practice-e2e-status were told before the host change.
• No paid hosting.

🤖 Generated with Claude Code