FORMWEFT CLEAN ROOM · READ ONLY
First verify identity, license, maintenance evidence, release chain, and supply chain exposure. By default, do not clone, install, build, or run any code from the repository.
FIVE REVIEW GATES
Each step uses only public metadata or user-supplied materials, and makes clear the evidence time, gaps, and confidence level of conclusions.
IDENTITY
Pin the repo URL, organization, default branch, release page, and current observation time to prevent confusion from same-name projects or mirrors.
Leave behindIdentity card and observation snapshot
ConfirmObject is unique and source is traceable
LICENSE
Distinguish licenses for source code, models, data, fonts, sample assets, and generated content; don't use one LICENSE file to endorse all assets.
Leave behindLicense matrix and unknowns
ConfirmNo obvious license conflicts for intended use
MAINTENANCE
Observe release cadence, issue responsiveness, contributor concentration, changelogs, and security advisories; don't use a single star count as a proxy for maintenance evidence.
Leave behindMaintenance evidence table
ConfirmMaintenance risk and dependency responsibility acceptable
SUPPLY CHAIN
Read-only checks of dependency locking, install hooks, binaries, download-and-execute behavior, credential requirements, and external service boundaries.
Leave behindRisk and manual confirmation points
ConfirmHigh-risk capabilities blocked or isolated
DECISION
Separate facts, inferences, unknowns, and recommendations; give pilot scope, stop conditions, and next review date.
Leave behindAdopt, pilot, observe, or reject conclusion
ConfirmConclusion reproducible by another reviewer
FIXED RELEASE
FORMWEFT clean-room original documentation Skill. MIT covers only this package's original documentation; it does not grant licenses for third-party repos, models, data, or assets, nor executes the code of the due-diligence target.
You can download this reviewed version's resource package. If it includes SKILL.md, provide it and the related documentation to your AI tool; first read and check the materials and usage boundaries, and do not run anything automatically.
You can also select the text to copy directly; read it first before executing.
Written independently clean-room based on directory topics; no licensed Feishu original package copied or redistributed. The pinned ZIP has passed structural validation, offline static scanning, and per-file manual review; no scripts, dependencies, install hooks, mandatory network access, or automatic remote operations.
FORMWEFT4e504fca44e4db0102418013427572a7ad4b987ed84d92d37f8772e7994562d3Tell us the candidate repo, target process, data classification, deployment environment, and responsible person, and we can extend the read-only diligence into a controlled pilot and internal handover.
The team reviews your request and follows up by email. Scope, fees and timing are agreed separately; submitting does not create an order.
