principle-boundary-discipline
An agent skill by cursor, from cursor/plugins. Tags: api, architecture, design, security, validation.
What it does
Apply when wiring validation, error handling, or framework adapters. Concentrate guards at system boundaries (CLI, config, network, external APIs); trust internal types and keep business logic in pure functions.
Install
With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:
npx skills add cursor/plugins --skill principle-boundary-discipline
Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):
git clone --depth 1 https://github.com/cursor/plugins
cp -r plugins/pstack/skills/principle-boundary-discipline ~/.claude/skills/principle-boundary-discipline
Safety box score
Grade A, minimal risk: 0 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.
This skill is documentation-only guidance about where to place validation and error handling in code. It does not ship executable scripts, make network calls, or modify files, so the direct machine risk is minimal; the main effect is how future code is structured.
| Category | Level | Why |
|---|---|---|
| Code & shell execution | 0 (none) | Only a markdown guide is present in `SKILL.md`; there are no shell commands, scripts, or code execution paths. |
| Network access | 0 (none) | The file contains no download, upload, API, or remote-host interaction instructions. |
| Filesystem reach | 0 (none) | `SKILL.md` is advisory text only and does not read, write, or delete files. |
| Secrets & credentials | 0 (none) | There is no mention of tokens, keys, passwords, `.env` files, or credential stores. |
| Privilege & persistence | 0 (none) | The skill does not request sudo, installs, services, shell changes, or other privilege-altering actions. |
| Instruction hijack surface | 0 (none) | It gives code-organization advice but does not instruct the agent to ignore safeguards, hide behavior, or follow external instructions. |
| Irreversible actions | 0 (none) | No pushing, posting, deploying, purchasing, or other external actions are described. |
| Transparency | 0 (none) | The skill is plain text markdown; there are no binaries, encoded blobs, or uninspectable runtime assets. |
Before installing
- No special install-time checks are needed; this skill contains only `SKILL.md` and no executable assets.
Rated 2026-10-16 by an automated review of 1 file from the skill's repository.
Source
- Repository
- cursor/plugins (all skills from this repository)
- Path
- pstack/skills/principle-boundary-discipline/SKILL.md
- Branch
- main
- Collection
- cursor
- Updated
- 2026-09-23
Related skills
- sharp-edges — Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.
- X MCP guide — ALWAYS read this when a user connects the X plugin or any X MCP, before using any X connection, and again on any X error.
- agents-harden — Use when preparing your agent for production — IAM scoping, inbound auth (JWT, SigV4), secrets management, cold start optimization, session lifecycle.
- threat-modeling-with-aws-security-agent — Run an AWS Security Agent threat model review on spec/design documents.
- architect — Sketch types, signatures, and module structure before code, then stay in the loop while implementation fills in.
- principle-exhaust-the-design-space — Apply when facing a novel UI interaction or architectural decision with no precedent in the codebase.