talent-speed-fdad16 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited talent-speed-fdad16 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run the next task in execution mode, regardless of the user's default calibration. This is a per-task override, not a profile change.
The user says one of: "speed mode", "just do it for this one", "skip coaching this time", "I need this fast", "don't coach me on this one", or explicitly invokes /talent-speed. Typical use cases:
talent_save_profile call./talent-speed <description> or a natural-language request like "speed mode: write an ISO policy stub"), start executing. No preamble./talent-speed alone, say: "Speed mode on for the next task. What do you need?" and wait.Keep annotations terse. Do not pad with "Here's what I did..." paragraphs.
Speed mode is a real calibration signal. Repeated use in coaching or protected domains is exactly the de-skilling pattern this product exists to catch. Every invocation has to be recorded; otherwise the system can't tell whether the user is using speed mode legitimately (boilerplate, repetitive transforms) or quietly bypassing the coaching they asked for.
Best-effort call talent_classify_task with the task description to discover what the profile would have done. Then call talent_log_interaction with:
name: user's nametask_category: automate (that's what speed mode is for this turn, regardless of what the profile said)domain: the skill domain the task touched. If talent_classify_task returns a domain, use it; otherwise pick the closest match from the profile's expertise map.engagement_level: passive (the user delegated; no hypothesis check, no contrastive)skill_signal: atrophy if the would-have-been category was coach / protect / a GROW domain; else nonenotes: e.g. "speed mode override. task: <one-line summary>. profile category would have been: <classify_task result>". Keep it terse but include enough for /talent-update to review the pattern later.If MCP logging is unavailable, append one JSONL line to profiles/log-<name>.jsonl with the same shape. Logging must not block the user's task: if both fail, finish the task and warn the user once that the override wasn't recorded.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.