tcr — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tcr (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
TCR = Test && Commit || Revert
The core loop is simple: run the tests. If they pass, commit immediately. If they fail, revert the change. This forces small, safe steps and makes every commit a known-good state.
1. Make a small change (test or production code)
2. Run the relevant tests
3. GREEN? → git add <specific-files> + git commit (Conventional Commit message)
4. RED? → git checkout -- <changed-files> (revert to last green state)The discipline is in the size of the step. If reverting feels painful, the step was too big.
Use Conventional Commits with the repository's branch/ticket prefix when present: BRANCH-ID <type>: brief description.
Do not hardcode Co-Authored-By trailers. If the maintainer explicitly requires a non-AI co-author trailer, derive the identity from the user's global Git configuration instead of inventing it:
git config --global user.name
git config --global user.emailOnly add a trailer when both values are configured and the repository policy allows it:
Co-Authored-By: <git config --global user.name> <<git config --global user.email>>Never add AI attribution trailers.
Types by TCR context:
| Context | Type | Example |
|---|---|---|
| New test (characterization or unit) | test | COMPANY-1234 test: add characterization test for calculateTotal |
| Test passes after refactor step | refactor | COMPANY-1234 refactor: extract calculateDiscount method |
| Bug fix confirmed by test | fix | COMPANY-1234 fix: correct null handling in getItems |
| New functionality via Sprout/Wrap | feat | COMPANY-1234 feat: add loyalty discount calculation |
When refactoring, the commit order matters. Follow this sequence:
Before touching production code, ensure tests exist and are committed:
BRANCH-ID test: add tests for <behavior>Each refactoring technique becomes one or more TCR cycles:
BRANCH-ID refactor: <what you did>Example — Extract Method in 3 TCR cycles:
COMPANY-1234 refactor: extract calculateSubtotal method signature
COMPANY-1234 refactor: move subtotal logic into calculateSubtotal
COMPANY-1234 refactor: inline temp variable after extractionAfter refactoring is complete:
BRANCH-ID test: add tests for <new structure>When used inside a refactoring workflow (e.g., the java-refactoring-expert agent):
| Workflow Step | TCR Behavior |
|---|---|
| Cover (Step 3) | Write tests → run → GREEN → commit with BRANCH-ID test: ... |
| Refactor (Step 4) | Each micro-step → run → GREEN → commit with BRANCH-ID refactor: ... |
| Harden (Step 5) | New tests → run → GREEN → commit with BRANCH-ID test: ... |
| Any RED | Revert the last uncommitted change immediately |
The agent should announce each commit to the user so they can see the trail of safe steps.
git add ., always name the files--no-verify, no amending published commits unless explicitly asked~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.