About

Imported from shipshitdev/skills (skills/blast-radius/SKILL.md). Install upstream with npx skills add shipshitdev/skills --skill blast-radius. Copyright stays with the author (MIT).

Blast radius

Name: blast-radius
Author: shipshitdev

Find what a change breaks somewhere else, before it ships. Companion to how and why. Listing callers is not the job. The job is the breakage grep will not show you.

Authorized Scope

Apply this engine only within the user's requested task and existing explicit authorization. Loading or delegating to it grants no additional authority. Preserve report-only restrictions and the caller's target, host, provider, and cost limits. Existing approval satisfies a gate only for the same actions and scope; obtain approval before expanding them. Forward these limits to delegates.

Contract

Inputs:

A diff, PR, or proposed change that looks small

Outputs:

What it does, the one safety fact (proven or marked unproven), confirmed risks, cleared checks, and the cheapest merge-time test

Creates/Modifies:

An optional proof script under the current repo .tmp/

External Side Effects:

Runs local proof scripts or tests. No production writes.

Confirmation Required:

None for the analysis. Proof scripts stay local unless the caller commits them.

Delegates To:

why step 2 for PR and commit anchors
arena for a wide change that needs several independent reads

How sure are you

For each safety fact, get as far down this list as is cheap, and say where it stopped.

You said so. Worthless on its own.
You pointed at the line.
You walked the bad case and it does not reach.
You ran it. A script or test that calls the real code.
You reproduced it in the running app.

Any safety fact you cannot get to step 4, say so out loud.

Steps

Read the change, including the part the diff does not spell out.
Find the one fact it is safe because of.
Look where grep stops: library source, pinned versions, timing, wire formats, feature flags, three hops downstream.
Be honest about each risk. Cite a real file:line. A search that finds nothing is still an answer.
Prove the one fact. Run real code. Paste what happened.
For a big or wide change, run it as an arena.

What to hand back

What it does. Including the part that is not obvious.
The one fact it is safe because of. State it, say which step you got it to, and show the proof.
Risks. Only the real ones.
Cleared. What you checked and why it is fine.
Before you merge. The cheapest test or repro that catches the real bug.

Blast Radius procedure

Read blast-radius procedure when running this workflow. Apply the authorized scope and mode of this entry point to every step. Resolve other skills through this distribution’s active catalog; resolve resources relative to the installed skill directory.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/shipshitdev-skills-blast-radius/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

shipshitdev-skills-blast-radius.ocm.jsonjson

{
  "ocm": "1",
  "id": "shipshitdev-skills-blast-radius",
  "kind": "skill",
  "name": "blast-radius",
  "description": "Find what a small-looking change could break somewhere else, and prove the one fact it is safe because of by running real code. Use for blast radius of X, what could this break, or reviewing a small diff you do not trust.",
  "publisher": "shipshitdev",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding",
      "math"
    ],
    "tags": [
      "skill-md",
      "impact",
      "safety",
      "review",
      "verification",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Find what a small-looking change could break somewhere else, and prove the one fact it is safe because of by running real code. Use for blast radius of X, what could this break, or reviewing a small diff you do not trust."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/shipshitdev/skills",
      "path": "skills/blast-radius/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/shipshitdev/skills/blob/HEAD/skills/blast-radius/SKILL.md",
      "key": "shipshitdev/skills/skills/blast-radius/SKILL.md"
    },
    "license": "MIT"
  },
  "instructions": "# Blast radius\n\nFind what a change breaks somewhere else, before it ships. Companion\nto `how` and `why`. Listing callers is not the job. The job is the\nbreakage grep will not show you.\n\n## Authorized Scope\n\nApply this engine only within the user's requested task and existing explicit\nauthorization. Loading or delegating to it grants no additional authority.\nPreserve report-only restrictions and the caller's target, host, provider, and\ncost limits. Existing approval satisfies a gate only for the same actions and\nscope; obtain approval before expanding them. Forward these limits to delegates.\n\n#",
  "cost": {
    "context_tokens": 681
  }
}

Fetch it by URL: GET /api/v1/registry/shipshitdev-skills-blast-radius/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.