background-worker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited background-worker (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this when work must keep running unattended: a queue worker, a Telegram/Discord bot, a polling agent, a scheduled scraper, or any always-on service. Ephemeral sandboxes (E2B microVMs, Codespaces) auto-die on a timer — wrong tool. A Box can be told to never auto-stop, persists its disk, and keeps a dedicated IPv4.
box resume brings it back.curl -fsSL https://box.ascii.dev/install | sh, then box login "$BOX_API_KEY" --json.
box_id="$(box new --no-auto-stop --json | jq -r 'select(.event == "ready") | .id')"
box ssh "$box_id" -- bash -s < ./setup.sh
box ssh "$box_id" -- "cd /app && nohup ./worker.sh > /var/log/worker.log 2>&1 &"
box extend "$box_id" --ttl 2592000 # optional: 30-day deadlineRunning processes do not survive stop/resume or fork — only the disk does. Make startup idempotent and relaunch after resume; use a process manager (systemd, pm2, nohup).
EU-only; disk-level snapshots; 100 active VMs soft cap; max 30-day TTL per extension (re-extend as needed).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.