Skip to content
Back to skills

Cocobehavior

ASecurity

Report the CocoPod's current automation maturity level (L0 Manual through L3 Autonomous-Eligible), computed deterministically from cocoplus.toml and active modes. Usage: $behavior maturity.

  • 724 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 5, 2026
ai-agents

Security analysis

A100/100

Pro scans all 3 files and shows the line behind each finding

Scanned September 5, 2026

npx -y skills add Snowflake-Labs/cocoplus --skill cocobehavior --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Cocobehavior?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Cocobehavior
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/snowflake-labs-cocobehavior-56177e79/badge)](https://www.skillsdirectory.com/skills/snowflake-labs-cocobehavior-56177e79)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: "behavior-maturity"
description: "Report the CocoPod's current automation maturity level (L0 Manual through L3 Autonomous-Eligible), computed deterministically from cocoplus.toml and active modes. Usage: $behavior maturity."
version: "1.0.0"
author: "CocoPlus"
tags:
  - cocoplus
  - cocobehavior
user-invocable: true
blocking: false
---

Your objective is to report the CocoPod's current automation maturity level.

Before proceeding, verify that `.cocoplus/` exists. If not, output: "CocoPlus not initialized in this directory. Run `$pod init` to begin." Then stop.

## Run the Assessment

Invoke `behavior-maturity`. It reads `cocoplus.toml` and `.cocoplus/modes/` and writes `.cocoplus/maturity.json`.

## Maturity Levels

- **L0 — Manual:** No CocoPlus automation modes enabled beyond initialization. Every phase gate requires explicit developer action.
- **L1 — Assisted:** Core lifecycle automation enabled (memory, safety gate) but SecondEye/CocoSentinel are not yet configured with block rules.
- **L2 — Supervised:** SecondEye is active with block rules and CocoSentinel is configured for at least one artifact type. HITL stages still require developer approval before proceeding.
- **L3 — Autonomous-Eligible:** All ten L3 readiness items below pass. AFK stages may proceed without per-stage developer approval, subject to the Four-Tier Boundary Framework's NEVER tier.

**L3 Readiness Checklist** (all ten required — a CocoPod may not operate at L3 without passing this at `$pod init` or `$pod upgrade --l3`):

1. Budget guard exists
2. Verifier is structurally separate from generator
3. Failure escalation ladder is defined
4. Human override path is documented
5. Output allowlist is bounded
6. Mandatory path denylist is configured
7. Kill switch exists
8. Run log is committed
9. No same-agent verification is enforced
10. Attempt cap is set

If `cocoplus.toml` declares `automation_maturity = "L0".."L3"` or `maturity_level = "L0".."L3"`, the reported level is capped at that declaration. A pod may not operate above its declared and validated maturity level.

## Output

Display the current level and, if not yet L3, how many of the ten checklist items pass:

```
CocoBehavior Maturity — L2 (Supervised)
L3 readiness: 6/10 items passing
  ✓ cocoplus-context.md complete
  ✓ cocoplus.toml permission tiers defined
  ✗ CocoFlow deterministic fallbacks — missing for 2 stage handlers
  ...
```

`$pod status` also surfaces this result from `.cocoplus/maturity.json` without re-running the assessment.

## Exit Criteria

- `behavior-maturity` runs deterministically (no LLM) and writes `.cocoplus/maturity.json`
- Reported level matches the highest tier whose conditions are fully satisfied
- L3 is only reported when all ten readiness checklist items pass
- Failing checklist items are named specifically, not just counted

## Anti-Rationalization

| Temptation | Why Wrong |
|------------|-----------|
| Report L3 when nine of ten items pass because "it's close enough" | L3 unlocks reduced developer oversight for AFK stages — a single unmet item is a real gap, not a rounding error |
| Use LLM judgment to assess a checklist item instead of the deterministic script | Maturity level gates autonomy — it must be reproducible and auditable, not a judgment call that could vary between runs |

Files in this skill

  • SKILL.md7.5 KB
  • behavior-maturity-engine.skill.md1.5 KB
  • behavior-maturity.skill.md3.3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…