yao-meta-skill/security/script_policy.md

Script Policy

Scripts should be deterministic, non-destructive by default, and reviewable.

Minimum expectations:

• expose a command-line entrypoint or clear function boundary
• prefer argparse and --help for operator-facing scripts
• avoid hidden interactive prompts unless the command is explicitly interactive
• state network or filesystem side effects in nearby docs or trust metadata
• emit structured JSON when used by scripts/yao.py