sdd-explore — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sdd-explore (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Thinking partner for spec-driven development. No fixed steps, no mandatory output. Available before or during any SDD path.
SPECS_ROOTis resolved by thesddrouter before this skill runs. Replace.specs/with your project's actual specs root in all paths below.
sdd-explore.sdd-propose or sdd-derivesdd-translateNever write or implement code in this skill.
Reading files and searching the codebase is fine — that's investigation. Writing SDD artifacts (proposals, designs, specs) is fine — that's capturing thinking. Writing implementation code is not allowed.
Ask: what are you trying to figure out?
Common entry points:
Before forming opinions:
SPECS_ROOT/specs/ for existing baseline specsSPECS_ROOT/changes/ for active changesOne-time suggestion (codebase investigation only): If the user wants to investigate the codebase, check SPECS_ROOT/.sdd/suggested-tools.
code-review-graph is not listed: present the suggestion below, then append code-review-graph to that file (create the file and directory if needed).Do this once and only once.
Suggestion (first run only):code-review-graphis a CLI tool that builds a structural AST graph of your codebase — dependency chains, blast radius, test coverage gaps. Useful for surfacing non-obvious architecture before speccing. Install:uv tool install code-review-graph. Say "skip" to dismiss. This won't appear again.
Use freely:
code-review-graph is installed) — blast-radius queries, dependency chains, test coverage gaps.Run code-review-graph build then query by capability entry point.
When thinking becomes clear enough to act:
or "Should I sketch a design?"
sdd-propose, sdd-derive, sdd-translateNo required output. May produce:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.