Is cog-weekly-reflection safe to install?

SaferSkills independently audited cog-weekly-reflection (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

library/methodologies/cog-second-brain/skills/weekly-reflection/SKILL.md · 1 file

library/methodologies/cog-second-brain/skills/weekly-reflection/SKILL.md1.3 KB · Markdown

name: cog-weekly-reflection

description: Cross-domain pattern analysis with personal, professional, and project domain synthesis

allowed-tools:

- file-read

- file-write

- file-search

- git-commit

COG Weekly Reflection Skill

Perform weekly check-in with cross-domain pattern analysis spanning personal, professional, and project domains.

Capabilities

Gather and analyze the past week's vault entries across all sections
Identify patterns in personal domain (energy, mood, productivity)
Identify patterns in professional domain (skills, career, industry)
Identify patterns in project domain (velocity, blockers, progress)
Synthesize cross-domain connections
Generate actionable insights with confidence levels
Quality-gated reflection with iterative refinement

Tool Use Instructions

Use file-read to load entries from 01-daily, 02-personal, 03-professional, 04-projects
Use file-search to find related entries across sections
Analyze patterns within each domain independently
Synthesize cross-domain connections
Use file-write to create weekly check-in in 01-daily
Add cross-references to identified patterns
Use git-commit to commit reflection

Examples

{
  "vaultPath": "./cog-vault",
  "mode": "weekly-checkin",
  "userName": "Alex",
  "rolePack": "engineer",
  "targetQuality": 80
}

cog-weekly-reflection— agent skill

Is cog-weekly-reflection safe to install?

COG Weekly Reflection Skill

Capabilities

Tool Use Instructions

Examples

Audit the pieces. Scan the whole. Decide.