aoa-decision-73bbda — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited aoa-decision-73bbda (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Provide one front door for durable decision work without loading three procedures into every request. Keep owner-authored decision records authoritative; indexes, retrievers, KAG packets, caches, and session evidence may locate or contextualize a record but never supply its rationale.
Select this family only after the request fits its frontmatter description. Treat an undecided option, ordinary documentation edit, current authority map, or non-decision generated/runtime drift as a different task. Lack of evidence or write authority never becomes implicit approval.
for the exact effect, target, and scope required by the selected mode
references/contract.yaml with owner source, actualeffects, verification, skipped checks, uncertainty, and stop line
Choose exactly one mode:
| Mode | Select when | Do not select when |
|---|---|---|
find | Existing rationale, status, supersession, or impact is requested. | A write or correction is already known to be required. |
record | A meaningful accepted decision lacks an adequate owner record. | The choice is open, trivial, already recorded, or only needs correction. |
correct | An existing decision record or its derived decision view is stale or wrong. | The task is pure lookup, a current non-decision source-authority conflict, or a genuinely new decision. |
references/contract.yaml, then read the selected mode reference toEOF. Do not load another mode or a retired child bundle.
before discovery. Read the owner's route law before any source or generated write. If that law defines a disposable or non-VCS owner root, do not probe Git; use its named files, builder checks, and direct hashes or comparisons.
rationale, status, supersession, and owner claim in the authored decision record.
selection, not an implicit continuation.
blocked_missing_input before target reads or effects when arequired owner source, accepted decision field, index contract, builder, or effect authority is unavailable. For a write, bind authorization to the exact effect, target, and scope. A current Operator or human authorization that already matches all three satisfies the approval gate without a repeated question; a new or changed effect, target, or scope requires fresh authorization.
verification, skipped checks, residual uncertainty, and stop line.
Read and follow references/find.md.
Read and follow references/record.md.
Read and follow references/correct.md.
owner; this skill structures work but does not make the decision.
record and correct effects.hide source or builder debt.
generated view, or silently rewriting semantic history.
and broader architectural correctness.
Let each repository supply its decision home, ID and status vocabulary, template, index contract and builder, validation commands, supersession law, and optional retriever binding.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.