doccraft-session-wrap-d7863b — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited doccraft-session-wrap-d7863b (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
propose docs artifacts / what should we capture / summarize this discussion into docs from the current conversation.
deferred with rationale), research synthesis, or reprioritisation — not every casual Q&A.
Default: propose artifacts only if necessary. Do not invent work to document.
NEVER write files unless the user explicitly asks to create or update them in the same turn. Propose drafts only.
Read doccraft.yaml at invocation. The sessionWrap.capture: block controls which artifact categories are in scope for this project — skip rows entirely in the proposals table when their category is disabled.
Relevant keys:
docsDir — root folder for all docs. Default: docs. All artifactpaths below are relative to {docsDir}/.
sessionWrap.capture.research — default true.sessionWrap.capture.reference — default true.sessionWrap.capture.business — default false. Projects that trackstrategy under {docsDir}/business/ set this to true; most projects leave it off.
If doccraft.yaml is missing, apply the defaults above. The ADR, Story, and Backlog / queue categories are always in scope — they are the load-bearing set.
<!-- doccraft:packages --> <!-- /doccraft:packages -->
For monorepo projects (a Known package roots block appears above when packages are declared), artifact proposals route to the package whose body the conversation referenced most. Default to the project root when no single package dominates. The paths in the docs map below resolve relative to the chosen package's {{DOCS_DIR}}/ (or the project-root {{DOCS_DIR}}/ for single-root projects).
Authoritative overview, if the project has one: {{DOCS_DIR}}/README.md.
| Kind | Path | Use for |
|---|---|---|
| ADR | {{DOCS_DIR}}/adr/NNN-slug.md | A decision to freeze (chosen option, explicit deferral, or rejected approach you do not want re-litigated). See doccraft-adr if installed. |
| Research | {{DOCS_DIR}}/research/<topic>.md | Exploration / comparison / notes (tools, papers, datasets) without a single "we decided X" — synthesis for humans and future agents. |
| Reference | {{DOCS_DIR}}/reference/<topic>.md | Long-form engineering notes (runbooks, eval harnesses, pricing) that are not framed as an ADR. If the project has a {{DOCS_DIR}}/reference/README.md, add a link there when adding a new file. |
| Business | {{DOCS_DIR}}/business/<topic>.md | Business strategy — target audience, business model, competitive landscape, marketing, unit economics, legal, launch sequence. Only propose if the project already tracks business docs under {{DOCS_DIR}}/business/; prefer updating existing topics over creating new ones. |
| Story | {{DOCS_DIR}}/stories/<slug>.md | Trackable scope with acceptance criteria and optional depends_on. Follow doccraft-story if installed. |
| Backlog / queue | {{DOCS_DIR}}/backlog.md, {{DOCS_DIR}}/queue.md | P-tier rows, status column, ordered "pick next" — not every chat. If the thread defined new dependencies, point the user at doccraft-queue-audit (Agent mode applies mechanical fixes). |
<!-- doccraft:inject point=session-wrap.artifact-types --> <!-- /doccraft:inject -->
Answer each only from the visible thread (and optional repo files the user already opened). If the answer is "no" for all actionable rows, go to Exit.
process / stack** conclusion worth git history? (Includes "we will not do X".)
citations) that is not a single sharp decision?
doc than an ADR or a story?
{{DOCS_DIR}}/business/: did the thread produce business insights (audience, pricing, competitive, marketing, legal, economics) that MUST update or extend those docs? Prefer updating existing docs over creating new ones. Skip this row entirely if the project has no {{DOCS_DIR}}/business/ tree.
criteria not already covered by an existing story?
that belongs in the tables (rare for a pure discussion thread)?
If none of the above apply, go to Exit.
MUST use these sections in this order:
| Artifact | Proposed path | Why (one line) | Follow |
|---|---|---|---|
| ADR / Research / Reference / Story / Backlog / Queue | e.g. {{DOCS_DIR}}/adr/004-foo.md | ... | link to relevant skill or docs overview |
them in the same turn. Offer drafts only when useful.
NNN-, no renumbering; usedoccraft-adr.
doccraft-story; consider updating{{DOCS_DIR}}/backlog.md (status column) and {{DOCS_DIR}}/queue.md (pick-next order) when priorities shift, and invoke doccraft-queue-audit in the same turn if new depends_on edges were introduced.
**Summary:** This thread established a caching strategy for API responses
and identified a follow-up task for cache invalidation testing.
| Artifact | Proposed path | Why (one line) | Follow |
|----------|---------------|----------------|--------|
| ADR | `docs/adr/012-api-response-caching.md` | Decided on Redis with 5-min TTL over in-memory; worth freezing | `doccraft-adr` |
| Story | `docs/stories/p2-cache-invalidation-tests.md` | Bounded deliverable with clear acceptance criteria from discussion | `doccraft-story` |
- ADR: next number is 012. Use `doccraft-adr` to write.
- Story: use `doccraft-story`. If `depends_on` edges are added, invoke
`doccraft-queue-audit` in the same turn.If no row in the proposals table applies, respond with one or two sentences only, e.g. "No durable decisions or synthesis in this thread; nothing to add to `{{DOCS_DIR}}/`." — then stop (no filler table, no speculative ADRs).
Before proposing any artifacts, MUST complete these checks:
propose artifacts from assumptions about what was discussed.
{{DOCS_DIR}}/adr/, {{DOCS_DIR}}/stories/,{{DOCS_DIR}}/research/, and {{DOCS_DIR}}/reference/ for existing files that already cover the topic. Prefer updating existing docs over creating duplicates.
doccraft.yaml to determine which categoriesare enabled. NEVER propose a Research artifact when sessionWrap.capture.research is false, or a Business artifact when sessionWrap.capture.business is false.
{{DOCS_DIR}}/adr/NNN-*.mdto determine the next unused number. MUST include the correct next number in the proposal.
{{DOCS_DIR}}/stories/*.md frontmatter to confirm no existing story already covers the same scope.
a conclusion — use Research instead, or propose nothing.
durable insight — use Exit instead.
NEVER; propose only.
{{DOCS_DIR}}/business/ does not existand the project has not opted in via config — NEVER.
thread — NEVER invent work to document.
use the one-sentence Exit instead.
use an ADR instead.
conclusion — use Research instead.
The task is complete when:
checklist.
justifications, and follow links for each proposed artifact, or the Exit response has been given.
or update them in the same turn).
NNN- number is included.doccraft-story andconsider doccraft-queue-audit is included.
doccraft-adr to writeit — do not write the ADR manually.
doccraft-story towrite it — do not write the story manually.
invoke each relevant skill in sequence.
it, create the ADR first so the story's adr_refs can reference it.
<!-- doccraft:inject point=session-wrap.instructions --> <!-- /doccraft:inject -->
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.