template-upgrade — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited template-upgrade (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This project is based on agentic-mobile-blueprint.
Template releases publish upgrade notes to .agents/skills/template-upgrade/vX.Y.Z.md. Each file documents only shared infrastructure changes — skills, _shared/ utilities, build config, env vars, deps. App scaffold files (mobile/app/, example screens) are intentionally excluded.
Read the local version:
cat TEMPLATE_VERSIONFetch the template's latest version:
https://raw.githubusercontent.com/Ampli-Group/agentic-mobile-blueprint/main/TEMPLATE_VERSIONIf local == latest: nothing to do. Stop here and tell the user they are up to date.
Fetch the list of upgrade files from the template:
https://api.github.com/repos/Ampli-Group/agentic-mobile-blueprint/contents/.agents/skills/template-upgradeThis returns a JSON array. Filter for files whose name matches vX.Y.Z.md and whose version is strictly greater than the local version and less than or equal to the latest version. Sort them in ascending semver order (oldest first).
Semver comparison: parse each version as [MAJOR, MINOR, PATCH] integers and compare numerically — do not do lexicographic string comparison.
Example: local = 0.1.0, latest = 0.3.1 → apply v0.1.1.md, v0.2.0.md, v0.3.0.md, v0.3.1.md in that order (only files that actually exist).
For each file to apply, fetch its content:
https://raw.githubusercontent.com/Ampli-Group/agentic-mobile-blueprint/main/.agents/skills/template-upgrade/vX.Y.Z.mdRead the full file before applying anything. Build a complete picture of all changes across all versions first.
Work through the upgrade notes in version order. For each version:
package.json, deno.json, or relevant config files.Key rules while applying:
supabase/functions/_shared/), copy the change directly — these files are not expected to be customised by consuming projects..agents/skills/), merge carefully — the project may have added its own skills.AGENTS.md, apply the described changes as a patch rather than overwriting — the project will have customised it..env.local files and remind the user to fill them in. Run mise run configure if the upgrade notes say to.mobile/app/, example screens, or maestro/ flows — these are owned by the consuming project.After applying all changes:
echo "X.Y.Z" > TEMPLATE_VERSIONSummarise:
If the user just wants to see what would change without applying it:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.