Read the package as a working procedure
| Check | Ask |
|---|---|
| Instructions | What task does it perform, and what changes will it make? |
| Scripts | What commands run, what files change, and what network calls occur? |
| Dependencies | Which runtimes and services are required? |
| Outputs | Where will files be saved, and could anything be overwritten? |
| Terms | What uses and redistribution does the license allow? |
A missing license is not a blanket permission to reuse or redistribute. Preserve existing notices and ask the publisher when the permitted use is unclear.
Pause when the task and requested access do not match
- A simple formatting task asks to read unrelated private directories.
- A command downloads and executes code without explaining its source or purpose.
- The procedure asks for broad account access that the output does not need.
- Instructions request secrets in the conversation or in files that will be shared.
Resolve the mismatch before running the step. Do not approve it just because an installation completed or the preview looked convincing.
Keep secrets outside the package
Use the service's supported environment or secret-storage mechanism. Do not commit API keys into SKILL.md, examples, assets or repository history. If a key was exposed, revoke or rotate it through the service rather than merely deleting the text.
Run a limited first task
- 1
Use a disposable workspace
Copy only the input files needed for a small test.
- 2
Review the proposed actions
Check output paths, external services and paid operations.
- 3
Inspect changes and output
Open the actual files and look at what the procedure changed.
- 4
Record your observations
Keep the version and the test brief so updates can be checked later.
Understand what HowAI verifies
HowAI CLI validates the archive hash and each extracted file, rejects unsafe archive structures and does not execute bundled scripts during installation. These checks help establish that the downloaded files match the release manifest.
They do not prove that instructions are appropriate for every project, that external services are trustworthy, or that an AI-generated result is accurate. Review execution and results separately.
FAQ
No. File integrity, instruction review, permission decisions and result quality are separate checks.
Read their role first. Removing files may break the documented workflow. If you cannot assess a required step, do not run it until the behavior is understood.
Reviewed October 18, 2026 · HowAI editorial
Found something unclear? Send feedback