00-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited 00-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Interactive setup that configures your project step by step. Run this once before starting the pipeline.
Parse $ARGUMENTS:
needs-review, mark completed. If in-progress, resume from last completed phase.None — this is the pipeline entry point.
Check current state:
docs/workflow-status.md — check step 00 status:completed: report "Setup already completed. Your project is configured. Run /01-backlog to start the pipeline, or /00-setup [update] to re-check for remaining placeholders."needs-review: report "Setup produced output but awaits your approval. Review CLAUDE.md and .impeccable.md, then run /00-setup [continue] to approve."in-progress: resume from the last completed phase (check which phase checklists are checked)not-started: proceed to Phase 1Important: Running /00-setup on an already-completed setup will NOT overwrite your configuration. It resumes from the last completed phase, which means it will jump to validation (Phase 6) and report current state. To change values, edit the files directly and run /00-setup [update].
Ask the user these questions one at a time, waiting for each answer before proceeding:
Grep pattern="{{PROJECT_NAME}}" → list of files
For each file: Edit old_string="{{PROJECT_NAME}}" new_string="<user's answer>" replace_all=trueDo NOT use sed — use the Edit tool for reliable cross-platform replacement.
## Project Context
[User's project description]
- **Phase:** [User's phase]
- **Revenue model:** [User's revenue model]
- **Development approach:** AI-assisted with Claude Codedocs/workflow-status.md step 00 Phase 1 checklist items.Ask the user:
<!-- CUSTOMIZE --> if skipped)docs/workflow-status.md step 00 Phase 2 checklist items.Ask the user:
docs/workflow-status.md step 00 Phase 3 checklist items.Ask the user:
.mcp.json has the figma entry (it should — pre-configured)mcp__figma__whoami.mcp.json with the credentials (replace {{OAUTH_CLIENT_ID}} and {{OAUTH_CLIENT_SECRET}}){{PROJECT_ROOT}} in .mcp.jsonnpx -y @modelcontextprotocol/server-gdrive auth{{GDOC_ID_design_doc}} in CLAUDE.md with the first doc ID (or whichever the user labels as design){{GDOC_ID_backlog}} in CLAUDE.md with the second doc ID (or whichever the user labels as backlog){{GDOC_ID_*}} placeholders in place — they won't cause errors, GDrive features will just be inactive{{OAUTH_*}} placeholders. Note in workflow-status.md.docs/workflow-status.md step 00 Phase 4 checklist items.Ask the user:
"Install Impeccable design quality skills? These add /critique, /audit, /polish, /colorize, and 17 more design commands. (yes / no / later)"
npx skills install pbakaus/impeccable/teach-impeccable is only needed if updating the design direction later — skills read .impeccable.md automaticallyUpdate docs/workflow-status.md step 00 Phase 5 checklist items.
Perform these checks automatically (no user input needed):
grep -r "{{" . --include="*.md" --include="*.json" -l — count remaining {{PLACEHOLDER}} variablesCLAUDE.md — verify Project Context section has non-placeholder content.impeccable.md — verify Brand Personality has non-placeholder content.mcp.json — check if it's valid JSONSetup Summary
─────────────
Project: [name]
Description: [1-liner]
Brand: [three words]
Tech: [frontend] + [backend]
Figma: [connected / not configured / later]
GDrive: [connected / not configured / later]
Impeccable skills: [installed / not installed / later]
Remaining placeholders: [count] in [file count] files
Required unfilled: [list if any]
Optional (ok to skip): [list]
Status: needs-review
Run /00-setup [continue] to approve and start the pipeline.needs-review in docs/workflow-status.md.If any phase fails or the user provides unclear input:
When [status] is invoked:
docs/workflow-status.md step 00 section{{PLACEHOLDER}} variables<!-- CUSTOMIZE markers (distinguishing critical vs optional)When [update] is invoked:
{{ patterns<!-- CUSTOMIZE markersdocs/workflow-status.md step 00 with current state~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.