Agent skill · Security

ca-override

Sanctioned, logged bypass of a gate or hard rule — one audit line, then proceed.

arbiterForgegithub.com/arbiterForgeGitHub ↗
codexclaude-codeAGPL-3.0
Install
npx skills add arbiterForge/codeArbiter --skill ca-override --agent codex

Same command for any agent — swap --agent for claude-code, cursor, copilot.

Facts
Files in the skill folder: 1
SKILL.md size: 4 KB
Bundled scripts: none
Path: plugins/ca-codex/skills/ca-override/SKILL.md
Open the folder on GitHub →
Where it comes from
Stars: 138 · +1 this week
Language: Python

Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.

From the SKILL.md

# $ca-override — logged bypass The sanctioned escape hatch. Bypass is permitted only with an audit log entry. Overrides are always logged, always visible, never silent. Single identity, single confirm. ## Flow 1. Validate `$ARGUMENTS` — the reason names the gate being bypassed and a justification. Reject a vague reason ("just skip it") and ask for a specific one. 2. Detect the operator identity from `git config user.email` only. If it is unset, ask the user once to state their identity for the log. (No platform ladder, no second confirmation.) 3. Append one line to `<project-root>/.codearbiter/overrides.log`: ``` [ISO-8601 timestamp] | BY: <email> | GATE: <gate bypassed> | REASON: <reason> ``` The log is append-only — never edited or deleted, committed as a permanent audit artifact. 4. Proceed with the overridden action. Note in the response that the override is logged. ## Security ceiling — heavier path for security-critical stops A routine gate (lint, a style rule, a non-security review finding) takes the single-confirm path above. But a **security-critical stop is NOT bypassable by a single confirm.** The following require the heavier path below, never the one-line flow: - a sec

What's inside
Steps it walks through
  1. Flow
  2. Security ceiling — heavier path for security-critical stops
  3. Hard gate
  4. When NOT to use
More from codeArbiter
All skills →
About this skill
What does the ca-override skill do?

Sanctioned, logged bypass of a gate or hard rule — one audit line, then proceed.

How do I install it?

Run `npx skills add arbiterForge/codeArbiter --skill ca-override --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.

Where does this skill come from?

From arbiterForge/codeArbiter, a repository with 138 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.

Is a popular skill a good skill?

Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.

Keep going