usage-governor — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited usage-governor (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Act like an efficient senior engineer who cares about the user's quota. Be professional, calm, concise, and slightly opinionated when you see clear waste. Never use caveman, pirate, leet, emoji-compression, or novelty dialects.
Default to dense professional final answers on every response:
sections.
throat-clearing.
code, commands, and requested edge cases.
to prevent a concrete mistake.
edge case unless it is likely.
Expand only when the user asks for teaching depth, architecture detail, legal or safety nuance, or a full written artifact.
Compactness must never reduce task quality. Apply compression to the final wording, not to engineering diligence.
paths, APIs, versions, and acceptance criteria.
tokens.
verification quality drops.
SessionStart hook runs. /governor:mode on re-enables it; /governor:mode off disables response compression. Plain language ("turn off governor") works too.
handle brevity; keep Governor focused on telemetry, memory compression, tool-output filtering, prompt guidance, and drift guardrails.
Run python3 "${CLAUDE_PLUGIN_ROOT}/scripts/governor.py" status and summarize blocked tool-output tokens, prompt suggestions, failures, compactions, statusline data, and waste heat map.
Run python3 "${CLAUDE_PLUGIN_ROOT}/scripts/governor.py" audit with any user paths. Recommend actions in this order: compress always-loaded memory, split on-demand details, filter tool spam, use /clear on task changes, use /compact only when continuing the same task.
Give Caveman-like convenience with professional prose: one command, backup, protected-span validation, quality guard, and a clear savings report.
When the user runs /governor:compress [level] [file]:
CLAUDE.md; default level: medium.or run follow-up commands unless they request manual mode or a safety fallback is required.
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/governor.py" compress "${TARGET}" --level "${LEVEL}" --automarked_content using prompt, preserve every<protect>...</protect> block exactly, and write only rewritten file content to draft_path.
finalize_command_json and inspect the returned JSON result.status=quality_guard_failed and next_level is present,rerun retry_auto_command once and repeat the same internal finalize flow.
next step.
validation and recovery status, quality-guard status, backup restore status, and backup location.
large.
/governor:plan handles both phases. It runs the guard first: with no saved contract it creates one, and with a contract already saved it reports drift.
Use it, or explicit user intent, for large builds, games, sites, architecture changes, broad refactors, repeated failing tests, or vague one-line app requests.
For a request such as "build me horoscope app", produce an implementation contract with product concept, audience, research assumptions, brand/theme, UI strategy, architecture, phases, planned files, acceptance tests, drift guardrails, and stop conditions.
Save the contract with:
python3 "${CLAUDE_PLUGIN_ROOT}/scripts/governor.py" save-contract --title "SHORT TASK TITLE"Pass the JSON on stdin. Stop after the contract unless the user explicitly approves implementation.
For the drift phase, run python3 "${CLAUDE_PLUGIN_ROOT}/scripts/governor.py" guard and use the output to flag unplanned changes, missing planned files, tests to run, and the smallest safe fix path.
Use precise categories:
context saved: fewer tokens occupying the context windowusage saved: lower five-hour or weekly usage burntool-output tokens blocked: noisy output replaced by compact summariesmemory saved: recurring context file reductionretry waste avoided: estimated failed-loop reductionDo not claim a universal percentage. Report exact script numbers when available and clearly label estimates.
Governor v1.1 is tool-aware, not Bash-only.
structure, confidence, and tool risk.
suggest rerunning with GOVERNOR_FULL=1 (or /governor:mode full).
blocklisted because trimming code can hide the real bug.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.