Operating Safely
by riekelte67b7af9ac74No license5 starsListed Oct 8, 2026Updated Oct 8, 2026Repository updated 3 weeks ago
Use when an action touches live systems, shared state, or things that do not come back - deleting, overwriting, restarting, killing processes, editing shared config, handling secrets, or working beside concurrent sessions. Encodes the destructive-op guards, secrets hygiene, and concurrent-session safety. Use before the destructive command, not after, even when the command looks routine.
Add to a SourceWeft workspace
- Open the skill in your dashboard and add it to a workspace.
- Enable it for the chats that should use it.
This skill is instructions only: it ships no scripts to execute.
Add to SourceWeftYou will be asked to sign in first, then taken straight to this skill.
Ask your agent to install it
Paste this prompt into Claude Code, Codex, Cursor or another agent that can run commands — or into SourceWeft chat. The agent reads this skill's install guide, shows you its source, license and scripts, and installs it with the SourceWeft CLI once you agree.
Read https://sourceweft.com/skills/gh-riekelt-principal-engineer-operating-safely/install.md and install the skill it describes. Before installing, show me its source, license and whether it ships scripts, and wait for my OK. Ask me before changing anything else on my machine.Install it yourself from a terminal
For Claude Code, Codex, Cursor and other local agents. The SourceWeft CLI fetches the skill from its source repository at the commit scanned here, and verifies every file against the hashes recorded when the skill was scanned. If anything differs, nothing is written.
npx @sourceweft/cli skills install gh-riekelt-principal-engineer-operating-safelyAdd --agent claude-code, codex, cursor or universal to choose which agent gets it (Claude Code by default).
Upstream installer — not verified by SourceWeft
The open-source skills installer fetches the same pinned commit, but does not check the files against the hashes SourceWeft recorded.
npx skills add https://github.com/riekelt/principal-engineer/tree/e67b7af9ac741945246012023ade5c2fee1222fa/plugins/principal-engineer/skills/operating-safelySource and attribution
Source:riekelt/principal-engineerinplugins/principal-engineer/skills/operating-safelyat commite67b7af
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
More from riekelt/principal-engineer
Writing Unit Tests
riekelt
Guides writing and refactoring unit tests around behavior-first principles: one behavior per test, deterministic setup, boundary-only mocks.
Verifying Before Done
riekelt
Encodes verification as the definition of done: drive the change at its surface, run the verify command, and report results faithfully.
Testing Changes
riekelt
Guides which tests a behavior change owes, including regression tests, discriminating assertions and red-test handling.
Scoping Changes
riekelt
Guides agents on sizing fixes to their trigger, decomposing oversized work visibly, and driving approved plans to completion.
Principal Engineering
riekelt
Encodes evidence-over-theory engineering discipline, safety rules, and a pre-change checkpoint for non-trivial software work.
Keeping One Source Of Truth
riekelt
Encodes a one-fact-one-source doctrine for code and data, covering derivation, duplicate absorption and disagreement handling.
More in Security
Kyc Rules
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
Compliance Tracking
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Dpop Adoption
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Secops Triage
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Secops Investigate
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Secops Hunt
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.