Security

rotifer-gene

Try it

The Gene manual for Rotifer Protocol — write a Gene's express function and phenotype schema, run the four-layer security audit before publishing, and migrate a Gene's fidelity from Wrapped to Hybrid or Native. Invoke explicitly when building, auditing, or upgrading a Rotifer Gene. Do NOT use for general code review, dependency auditing, or framework migration — every procedure here operates on Rotifer Genes, their phenotype schemas, and the Rotifer CLI, and nothing else.

What it does

Three manuals, one per thing you might be doing. Read the one you need — they are long because they are references, not tutorials.

The skill document

Working on a Gene

Three manuals, one per thing you might be doing. Read the one you need — they are long because they are references, not tutorials.

What you are doingRead
Writing a Gene: init, express, phenotype, test, compile, publish, Arenamodules/dev.md
Checking one before it ships: credential and artifact scanning, four layersmodules/audit.md
Upgrading fidelity: Wrapped → Hybrid → Native, and proving it still worksmodules/migration.md

Which one

Match what the reader is asking for:

They sayGo to
create, write, initialize, compile, publish, Arena, fitnessmodules/dev.md
audit, scan, security, credential, is this safe to publishmodules/audit.md
upgrade, Wrapped to Native, rewrite, fidelity, refactormodules/migration.md

If it is ambiguous, say so and offer the choice rather than guessing — these are long documents and loading the wrong one costs the reader more than a question does.

What holds across all three

  • Fidelity is declared honestly. Native means the logic is in WASM with no external calls; Hybrid means WASM plus calls to an allowlist; Wrapped means a shell around someone else's API. A Wrapped Gene labelled Native is a broken promise, not an optimization.
  • F(g) is multiplicative. Any factor at zero eliminates the Gene, so a failure mode cannot be averaged away by strength elsewhere.
  • Everything a reader sees is English — descriptions, schema fields, README, error messages.
  • A published version is immutable. Bump, do not overwrite.

What this Skill does on your machine

Nothing on its own. It describes commands — rotifer init, test, compile, publish, arena submit — and you run them. The ones that reach the network are publish, arena submit --cloud and login; the rest are local. Read modules/audit.md before your first publish: it is the difference between finding a leaked credential on your disk and finding it in a public registry.

Related skills

Stores durable facts in a categorized, plain-markdown vault on disk, alongside your agent's built-in memory.

by Iván555 installs18 stars

Generate and edit Draw.io, Mermaid, and Excalidraw diagrams from natural language using a structured JSON spec.

by nssa.io1.0k installs47 stars

Find why your productivity system keeps failing, then apply the smallest fix — capacity math, bottleneck routing, durable local notes.

by Iván854 installs69 stars

Join a video meeting as an AI bot with voice, avatar, and screenshare across four operating modes.

by johnpatternai21 installs8 stars

More from xiaoba-dev

Browse all skills

Route any Rotifer request to the right sub-capability — onboarding, scaffolding, diagnostics, search, or fidelity upgrade.

by xiaoba-dev17 installs

Build a Rotifer Agent from existing Genes through a 7-phase workflow of decomposition, composition, creation, and testing.

by xiaoba-dev14 installs

Compare two Rotifer Genes head-to-head and get a Markdown report with F(g) fitness and V(g) security grades.

by xiaoba-dev14 installs

Rank an Agent's Rotifer Genes against the Arena and swap in stronger ones. Invoked explicitly via /evolve — scan local capabilities, compare Genes, inspect fitness scores, and replace weak ones with user approval. Not for capabilities outside Rotifer.

by xiaoba-dev17 installs

Cross-vendor adversarial review. WARNING — this sends your brief, and any source files you approve, to a model hosted by a THIRD-PARTY vendor, where it stays in that vendor's session history under their retention terms. Ship a plan, proposal, or design to a model from a DIFFERENT vendor to attack it; every objection carries a verifiable anchor; the defender rules with an evidence tag on each ruling; the final round classifies into still-disputed / unresolved / verified-consensus instead of forcing agreement; a fresh-session judge is mandatory whenever the outcome looks too clean. Invoke only when the user explicitly asks for an adversarial review by a model from another vendor. One model role-playing several experts is not this skill.

by xiaoba-dev2 installs

Session knowledge distillation: assign what you just learned in this session into an agent's four-layer persistent knowledge base (rule / memory / skill / decision record). The core is four disciplines — search before adding, pick the right layer, guard against bloat, and run a hygiene pass before landing anything. Fits agent workflows that already have (or want to build) these four layers; this is not a general note- taking tool. Invoke explicitly at the end of a session to consolidate what was learned.

by xiaoba-dev2 installs