Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →aigorahub/fugu
Run a bounded Sakana Fugu repository task or explicit review through codex-fugu.
Passed 2 of 9 test cases with the skill, and 1 of 9 without it.
and 2 more in the full report
5 fixed0 passed either way16 still failing4 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
During a Fugu review run, temporary build directories in `/tmp` disappear while the audit is running. Does the audit fail closed on this?
| Checked | Without skill | With skill |
|---|---|---|
| Tolerates benign disappearing temporary subtrees during audit execution. | Missed | Passed |
The instructions your model reads when the skill loads.
This is the Elves-managed Claude Code alias for
/fugu [--deep|--ultra|--max] [--max-wait SECONDS] [--preflight] [--include PATH] <planning-task>
and
/fugu [--deep|--cyber|--ultra|--max] [--max-wait SECONDS] [--preflight] review <scope>.
Load the installed elves skill's Provider shortcut protocols and
references/provider-shortcuts.md. Resolve scripts/run_fugu.sh from the active Elves skill root,
keep the target repository as the working directory, pass through the validated mode/profile/context,
and run it.
Host Fugu routing (required when the user omits a profile flag). Natural language "use Fugu"
or plain /fugu <task> uses bare fugu/high by default. Before launch, state one
short Fugu route: … line. Explicit user flags always win.
Profile locks model + effort.
rg/git/gh can finish in under a minute.review <scope> when the user asked for a review or audit.fugu/high by default. Use --deep only when regular Fugu needs xhigh effort. The host may select --cyber only for explicit security review or threat-model intent after a successful Cyber call in the current session. Only a user-explicit --cyber request may establish that proof. Otherwise, use regular Fugu. The user must explicitly select --ultra or --max.--write.--include PATH only for non-gitignored files; if any include, run
--preflight first and launch only when admitted. No separate "minimal snapshot" product.| tail / | head). Chat cancel does not stop the
provider; wait up to the wall or kill the process group. On timeout/crash, harvest any
Fugu partial salvage markers before relaunch. Verify findings host-native and clean up leftover process groups (see references/fugu-calling-guide.md).Full decision table, route templates, wait/poll contract, and field notes:
references/provider-shortcuts.md (Host routing when the user says "use Fugu") and
references/fugu-calling-guide.md.
Plain /fugu <task> is a read-only planning task whose answer follows the request;
/fugu review <scope> is the opinionated read-only review. Exact includes must be
admitted and copied; both .env.* and *.env names are excluded. Live writable-state limits
tolerate benign disappearing temporary subtrees and fail closed on other audit errors. macOS
read-only cleanup remains best-effort and never claims recursive containment. The Linux lane
omits procfs and exposes only a synthetic /proc/self/exe link to the qualified real Codex
test cases passed, vs 1 / 9 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.