new-role — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited new-role (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Scaffold a complete Ansible role following the standard directory structure and production conventions.
Collect these parameters (one at a time, using discovery context for defaults):
nginx, postgres, ntp)./roles/, default from discovery roles_path)namespace.collection.role (e.g., myorg.infra.nginx) → creates role inside the collectionWhen the user provides a FQCN (namespace.collection.role):
./collections/ansible_collections/<namespace>/<collection>/roles/collections_path entries from ansible.cfg/ansible-designer:new-collection first, or create the role standaloneAlways ask this question — never skip it:
Does this role need multi-OS support?
1. No — single platform (Linux/RHEL only)
2. Yes — RHEL + Solaris + Windows/WinRM
Enter 1 or 2:If single-platform (option 1): Generate standard role structure without OS var files.
If multi-OS (option 2): Generate:
vars/RedHat.ymlvars/Solaris.ymlvars/Windows.ymltasks/RedHat.ymltasks/Solaris.ymltasks/Windows.ymltasks/main.yml using ansible.builtin.include_vars with with_first_foundroles/<role_name>/
├── defaults/main.yml
├── files/ (empty directory — create .gitkeep)
├── handlers/main.yml
├── meta/main.yml
├── tasks/main.yml
├── templates/ (empty directory — create .gitkeep)
├── tests/inventory
├── tests/test.yml
└── vars/main.ymlroles/<role_name>/
└── tasks/
├── main.yml (with OS detection + include_vars)
├── RedHat.yml
├── Solaris.yml
└── Windows.yml
└── vars/
├── main.yml
├── RedHat.yml
├── Solaris.yml
└── Windows.ymlUse references/role.md as the base for all generated content.
no_log: true on any task that handles secrets or passwords per references/security_vault.mdansible.builtin.include_vars + with_first_foundreferences/testing.mdgalaxy_info blockmin_ansible_version: "2.15"Show summary:
Will create: ./roles/nginx/ (12 files)
defaults/main.yml — nginx port, worker count, log dir, SSL toggle
handlers/main.yml — Reload nginx, Restart nginx
meta/main.yml — galaxy_info: platforms EL 8/9, Solaris 11.4, Windows 2019/2022
tasks/main.yml — OS detection + 3 common tasks
tasks/RedHat.yml — RHEL: dnf install, firewalld, SELinux boolean
tasks/Solaris.yml — Solaris: pkgadd, svcadm enable
tasks/Windows.yml — Windows: win_package install, win_service
vars/main.yml — internal constants
vars/RedHat.yml — RHEL: package=nginx, service=nginx, config=/etc/nginx
vars/Solaris.yml — Solaris: package=SUNWnginx, smf_fmri=svc:/network/nginx
vars/Windows.yml — Windows: service_name="nginx", install_dir="C:\nginx"
tests/test.yml — smoke test playbook
Proceed? (yes/no)Show file tree:
find roles/<role_name> -type f | sortSuggest next step:
Next step: Run `ansible-lint roles/<role_name>/` to validate
or use /ansible-designer:review-role for a structured review.
To use in a playbook, run /ansible-designer:new-playbook.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.