From 99352395af84639113838af61233d35a026461a8 Mon Sep 17 00:00:00 2001 From: root Date: Mon, 20 Apr 2026 14:09:18 -0300 Subject: [PATCH] Forbid local artifact generation as MCP fallback MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Observed behavior: when the MCP returns Auth required, Codex fell through to "let me generate the .pptx/.xlsx myself" — probing for python-pptx/openpyxl/xlsxwriter and then PowerPoint/Excel COM automation. Any artifact produced that way has fabricated SKUs, prices, and templates — worse than no artifact. Previous guardrails forbade reconstructing the KB locally and inventing SKUs, but did not explicitly forbid local artifact generation. Add that rule: if the MCP is unreachable, no artifacts are produced, full stop. Co-Authored-By: Claude Opus 4.7 (1M context) --- skills/oci-deal-accelerator/SKILL.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/skills/oci-deal-accelerator/SKILL.md b/skills/oci-deal-accelerator/SKILL.md index 4d6bced..31b0120 100644 --- a/skills/oci-deal-accelerator/SKILL.md +++ b/skills/oci-deal-accelerator/SKILL.md @@ -52,7 +52,8 @@ Do **NOT**: - attempt to reconstruct `kb://*` resources by searching the local workspace — the knowledge base lives **server-side only** and is never present in any cloned repo, plugin cache, or skill directory; - invent SKUs, pricing, service names, or quantities to fill the gap; - generate partial artifacts (deck, BOM, diagram) using inferred data; -- retry the same tool call more than once before surfacing the fix to the user. +- retry the same tool call more than once before surfacing the fix to the user; +- **generate artifacts locally as a fallback**. Do not spawn `python-pptx`, `openpyxl`, `xlsxwriter`, PowerPoint/Excel COM automation, LaTeX, pandoc, or any other local tooling to produce `.pptx`, `.xlsx`, `.pdf`, `.docx`, `.png`, or `.svg` files. All artifact generation flows through MCP tools (`generate_deck`, `generate_bom`, `generate_diagram`, etc.). If the MCP is unreachable, **no artifacts** — only surface the fix command to the user. Exploration of the local filesystem on auth failure wastes context and produces wrong answers. Fail fast, surface the command, wait for the user.