customize

1# Customize
2 
3This Skill routes conversational customization to one of two native composers. It is **not a security
4boundary**: it helps the user draft, review, confirm, and report changes, while the application decides
5whether a destructive or identity-affecting operation actually takes effect.
6 
7> Important: this is a framework Skill, not hard isolation. Do not claim that this Skill provides hard
8> security isolation; it is workflow guidance only.
9 
10## Route first
11 
12- For creating, revising, publishing, inspecting, or deleting a Skill, call
13  `host.skills.read('skill-creator')` and follow that internal Skill completely. Do not duplicate its
14  authoring workflow here.
15- For creating or managing a Specialist, follow the Specialist workflow below.
16- For a combined request, create or revise the Skill first. After publish and read-back, attach it to
17  the selected Specialist only when the user requested that relationship.
18 
19Do not create a plan record for Specialist or Skill CRUD. Ask only about choices that materially change
20behavior, access, or safety. Skills and Specialists are application-managed resources, not Artifacts.
21 
22## Specialist runtime
23 
24The Skill runs in the **JavaScript control-plane REPL only**. It uses JavaScript exclusively. Do not
25use Python or R here, and do not look for `host.agents` or `host.skills` in a data kernel — they are
26absent there. Specialist mutation happens through `host.agents.*`; Skill lifecycle work is delegated
27to the internal Skill Creator above.
28…