Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/securitymindedsolutions-huh
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/huh
What's inside
- Skill name
huh- Description
- Now, next, you. Wait, where were we? Say the last message again as three labelled lines - where it stands, what happens without me, and what you need from me. For picking a thread back up.
- License
- MIT
- Metadata
- summary: Now, next, you. Restates the last message as three labelled lines for picking a dropped thread back up
- Instructions
- 87 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
Say your last message again for someone who is tired. They have nine things open and are picking this one back up. ## Shape Three labelled lines, nothing before or after them: ``` Now: where it stands. Next: what happens without them. You: the ask, or "nothing". ``` One or two sentences a line. Keep a label even when its line is empty - a missing label reads as forgotten, not as clear. Write each label in bold - `**Now:**`, `**Next:**`, `**You:**` - and the urgency prefix on each bullet too. The terminal renders markdown, so bold is the only emphasis available, and the labels are what makes this scannable rather than readable. ## Words No file paths, tool names, commands or shop talk. Say what a thing does, not what it is called. Short common words: use, not utilize. Wrong, not incorrect. Left out, not omitted. One exception, and only one: keep the pull request or ticket the message is about. Once, as a short link - `[#1733](the url)` - on the thing it names. It does not count against the shape. ## The ask An ask is something only they can do: a decision, an approval, an action, an answer. "I will ping you when it lands" is not an ask. "Nothing" and an ask cannot share a line. If there is an ask, it comes first. Say how soon it is needed after it, never before. **One ask stays inline on the `You:` line. Two or more become bullets under it**, one per ask, so the count is visible before a word is read. Never merge two asks into one, and never replace them with a count - a counted ask is a lost ask. Order the bullets by what is needed soonest. **Each bullet leads with its urgency**, so the reader can find tonight's work without reading the topics: ``` You: - Before I merge: both changes now, or hold the app side until after the campaign? - No rush: file a check that catches the next one? ``` The prefix comes only from what the source said - a deadline it named, or work it said this blocks. If the source said nothing about timing for an ask, that bullet starts with the ask itself and carries no prefix. Never invent urgency, and never invent a deadline. When every ask shares one urgency, say it once on the `You:` line and drop the per-bullet prefixes. A prefix repeated on every bullet is not information, and "Also before starting" is a clumsy way of saying "same as the one above": ``` You: both before any work starts. - Cross-agent for all nine, which means ... - Does your local copy stay the master ... ``` ## Faithfulness Keep the ask, and never invent one. Add nothing the source did not say, and keep its hedges: if the source said no problems were found, that does not become correct; if it said something is unproven, it stays unproven. Keep every number the source gave. No headings, tables or code beyond the three labels, and no bullets except the multiple-ask case above. If the message was already this short, say so and leave it alone. --- Sibling: `/ugh` (one breath, the tldr) shares everything above except the Shape section. A rule changed here belongs there too.
From SecurityMindedSolutions/ai-skills, MIT.
More from SecurityMindedSolutions/ai-skills
- 0.595score
audit-backend
SecurityMindedSolutions
Backend application architecture audit.
SkillAFreshness: A★ 2Claude Code +9 - 0.595score
audit-frontend
SecurityMindedSolutions
Comprehensive front-end architecture audit with parallel sub-agents.
SkillAFreshness: A★ 2Claude Code +9 - 0.595score
audit-security
SecurityMindedSolutions
Comprehensive security audit with parallel sub-agents.
SkillAFreshness: A★ 2Claude Code +9 - 0.590score
github-remediate-vulns
SecurityMindedSolutions
Scan GitHub org for Dependabot, code scanning, and secret scanning alerts.
SkillAFreshness: A★ 2Claude Code +9 - 0.563score
run-jev
SecurityMindedSolutions
Run an ad-hoc judgment over one thing or a batch of things with TypeSafe's Jev model, without re-deriving the API, credentials, or output handling every time.
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
code-audit-jev
SecurityMindedSolutions
Unit-level security judgment of a repository, a folder of repositories, or the units a pull request changed, with TypeSafe's Jev: code splits every source…
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
prompt-injection-eval
SecurityMindedSolutions
Score prompts for prompt injection with TypeSafe's Jev before they reach an LLM: a reference gate function a backend can call (allow / review / block with a…
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
traffic-triage-eval
SecurityMindedSolutions
Classify the traffic behind each client IP in edge logs (GCP load balancer, AWS ALB, AWS WAF, CloudFront, nginx, anything) as benign user, benign bot, AI…
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
resume-mirror-eval
SecurityMindedSolutions
Bulk-evaluate a folder of resumes against one job description and flag the ones whose wording mirrors the posting closely enough that a human should look…
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
built-with
SecurityMindedSolutions
Passive, headless recon of a web app's frontend to infer its backend and tech stack - API endpoints, third-party vendors, CSP allow-lists, auth provider…
SkillBFreshness: B★ 2Claude Code +9 - 0.554score
jev-email-analysis
SecurityMindedSolutions
Judge what an email is trying to get someone to do, with TypeSafe's Jev: a category across 16 kinds of mail (vendor payment fraud / BEC, fake invoice…
SkillBFreshness: B★ 2Claude Code +9 - 0.554score
ugh
SecurityMindedSolutions
One breath, the tldr.
SkillBFreshness: B★ 2Claude Code +9
Signals
- Stars
- 2
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 5, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from SecurityMindedSolutions
- 0.595score
audit-security
SecurityMindedSolutions
Comprehensive security audit with parallel sub-agents.
SkillAFreshness: A★ 2Claude Code +9 - 0.595score
audit-backend
SecurityMindedSolutions
Backend application architecture audit.
SkillAFreshness: A★ 2Claude Code +9 - 0.595score
audit-frontend
SecurityMindedSolutions
Comprehensive front-end architecture audit with parallel sub-agents.
SkillAFreshness: A★ 2Claude Code +9 - 0.590score
github-remediate-vulns
SecurityMindedSolutions
Scan GitHub org for Dependabot, code scanning, and secret scanning alerts.
SkillAFreshness: A★ 2Claude Code +9 - 0.563score
run-jev
SecurityMindedSolutions
Run an ad-hoc judgment over one thing or a batch of things with TypeSafe's Jev model, without re-deriving the API, credentials, or output handling every time.
SkillBFreshness: B★ 2Claude Code +9 - 0.558score
code-audit-jev
SecurityMindedSolutions
Unit-level security judgment of a repository, a folder of repositories, or the units a pull request changed, with TypeSafe's Jev: code splits every source…
SkillBFreshness: B★ 2Claude Code +9
Cite this page
huh skill. Agent Mart. https://agentmart.dev/skills/securitymindedsolutions-huh (last updated 2026-10-24)