git:20260910.eee8645 to git:20260910.bd96e48

---

name: project-context

description: Skill Doctor product and architecture context. Use at the start of a session, when deciding where code lives, when the user asks how the scanner works, or before any non-trivial change.

---

# Project context

Read `AGENTS.md` then `CONTEXT.md` if they exist. This skill is the short form.

## Product

Skill Doctor is a **Rust CLI** that scans AI agent skill files. The shippable core is **deterministic L1**. L2 (host-delegated semantics), L3 (sandbox), and L4 (intel) are optional and must degrade to **reduced coverage**, never a crash or a dropped L1 finding.

Repo: `KalarisLabs/Skill-Doctor`. Do not create a new GitHub repository.

## Pipeline

```

input → L0 intake/digest/cache

→ L1 static engines THE PRODUCT

→ L2 host-delegated MCP optional, additive-only

→ L4 threat intel network opt-in

→ L5 score / coverage / report

```

Default CLI: L0+L1+L5 with `--offline --deterministic`.

## Crate map

| Crate | Owns |

|-------|------|

| `skill-doctor` | clap, printers, exit codes |

| `skill-doctor-core` | L0/L1/L4/L5, taxonomy, scoring |

| `skill-doctor-rules` | `build.rs` compiles `rules/` |

| `skill-doctor-neutralize` | SD-11 envelope, no I/O |

| `skill-doctor-mcp` | host-delegated MCP |

| `skill-doctor-sandbox` | L3, only crate that may use `unsafe` |

## SDTM-v1 — do not renumber

SD-01 prompt injection · SD-02 command injection · SD-03 exfil · SD-04 scope (capability differ, no model) · SD-05 supply chain · SD-06 SSRF · SD-07 tool poisoning · SD-08 backdoors · SD-09 flooding · SD-10 obfuscation · SD-11 scanner-mediated injection.

## Exit codes (stable)

`0` clean · `1` usage/internal · `2` findings ≥ `--fail-on` · `3` coverage under threshold.

## Build order if the tree is still a stub

1. CLI `--help` / `version` / `scan` stub

2. L0 digest

3. rules crate + one YARA rule per class

4. L1 engines

5. L5 reports + exit codes

6. additive-only scorer + neutralize

7. fixtures + determinism test

8. MCP

9. CI matching `TESTING.md`

10. release last

Load `rust-invariants` before changing defaults. Load `ci-cd` before touching workflows. Load `rust-perf` before optimizing.