maintainability-code-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited maintainability-code-review (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
read, test, reason about, operate, or repair than the changed behavior requires.
representation. Flag repeated business rules, mappings, constants, schemas, validations, queries, test setup, build logic, or documentation that are likely to drift.
textually similar; prefer duplication over the wrong abstraction when the repeated code has different reasons to change.
question. Prefer names and APIs that make the question and the meaning of each value evident at the use site.
comparing changes.
git rev-parse --is-inside-work-treegit symbolic-ref --quiet --short refs/remotes/origin/HEAD
git remote show originPrefer the refs/remotes/origin/HEAD result when available, removing the origin/ prefix only for local branch checks. If the remote default branch is not configured, inspect local branches and ask for a base branch only when no reasonable base can be inferred.
git status --short
git branch --show-current
git diff --stat <base>...HEAD
git log --oneline <base>..HEADUse the selected base exactly in comparison commands. Examples include origin/main, origin/master, main, master, or a user-provided release branch.
git diff <base>...HEADFor large diffs, inspect git diff --name-only <base>...HEAD first, then read only files needed to verify KISS or DRY concerns.
candidate finding, ask how the branch works, how it can fail, and whether the simpler or less duplicated alternative preserves the intended behavior.
polarity, responsibilities, and whether Boolean arguments hide modes or materially different behavior.
synthesizing the final review. Keep notes independent until all passes are complete so early findings do not bias later checks.
changes. Do not report pre-existing complexity unless the branch depends on it or makes it worse.
relevant surrounding code, tests, or call sites to rule out false positives.
behavior, the duplicated knowledge, or the unnecessary complexity.
include low-value info findings only when they are clearly actionable.
KISS issues:
not simplify the current requirement.
expressed more directly.
need in the branch.
verify than a direct test would.
DRY issues:
permissions, feature flags, status mappings, validation rules, or constants.
made in multiple unrelated places.
definitions that duplicate change-prone knowledge.
helper, table, data structure, or existing local abstraction.
Boolean issues:
flag, done, status, or check that do not statethe question being answered. Prefer a specific, grammatical question; common prefixes are is for state or identity, has for possession or presence, can for capability, and should for intent or a decision.
isAccess, hasActive, orcanAdmin. Apply naming conventions idiomatically for the project language; do not require these exact prefixes when another form is clearer and conventional.
isNotEnabled,hasNoAccess, or !isDisabled. Prefer positive polarity, except when faithfully representing an external API or protocol; map negative external fields to positive domain concepts at the boundary when practical.
reused for different stages of a workflow. Prefer explicit predicates, early returns, or a result/state type that preserves the distinctions.
especially multiple Booleans or a Boolean that selects substantially different behavior. Prefer separate methods, a named enum/mode, or an options object according to the number and nature of the choices.
Do not flag:
safety, accessibility, security, or observability.
when they do not use is, has, can, or should.
ceremony without improving the call site.
generation, unless the branch changed the generated source of truth.
Use a code-review response shape:
KISS, DRY, BOOLEAN, or a slash-separatedcombination when it spans concerns.
defect risk.
concerns as findings.
KISS, DRY, or Boolean issues, say that directly and explain the simpler direction.
that was reviewed.
Severity mapping:
behavior, security impact, data loss, or serious production risk.
meaningfully harder maintenance.
risk.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.