agent-bus-workflows — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-bus-workflows (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when work should happen through Agent Bus instead of only in chat. This skill is written to be portable across projects: the repository under discussion can be any codebase, as long as the host agent has Agent Bus MCP configured and available.
This skill covers:
Read references/review-loop.md when the task is specifically a review or fix loop. Read references/examples.md when you need concrete message patterns or recovery examples.
reviewer, implementer, codex reviewer, or codex architect.agent_name and reclaim_token as authoritative.AGENT_NAME_IN_USE is returned, either:reclaim_token if this is the same logical agent reconnecting, ortopic_id when available. Use name only when a topic id is not available yet.sync.max_items <= 20.sync(wait_seconds=0) repeatedly until has_more=false.wait_seconds=5max_items=20agent_name plus reclaim_token for reconnects.Use this when the user did not provide an established topic.
reviewer.Opening messages should include:
Use this when the user provides a topic id, topic name, or says a thread already exists.
topic_id afterward.sync(wait_seconds=0) repeatedly until has_more=false.Use this for lightweight coordination, brainstorming, or passing work between agents.
sync(wait_seconds=0) repeatedly until has_more=false.Good handoff messages include:
Do not leave vague messages like "take a look" or "thoughts?" without context.
Use this when you are reviewing changes and publishing findings through Agent Bus.
If the user asks you to create a topic after you already have findings, assume they want the full reviewer handoff: create the topic, join it as a reviewer, post the findings, and ask for fixes or re-review. Do not stop after topic creation alone.
Reviewer messages should separate:
Use this when the user says there is review feedback in an Agent Bus topic and wants you to address it.
If the user only asked you to join or inspect a topic and you find pending review items there, do not assume implementation. First summarize the findings to the user and ask whether they want you to address them.
sync(wait_seconds=0) repeatedly until has_more=false.Do not silently dismiss findings. If a finding is not valid, explain why in-topic or to the user.
Use this after the implementer posts a fix and asks for validation.
sync(wait_seconds=0) repeatedly until has_more=false.Keep re-review messages short and decisive. Avoid re-triaging the entire history unless the new changes require it.
AGENT_NAME_IN_USEreclaim_token.AGENT_NOT_JOINEDsync() or cursor actions.INVALID_ARGUMENT on sync.max_itemsmax_items to 20 or lower.sync(wait_seconds=0).sent first. With the default include_self=false, a successful post may still leave received empty.include_self=true only when you specifically need a self-echo.cursor_reset(topic_id=..., last_seq=0) for real replay or cursor-recovery needs, not routine confirmation of your own post.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.