skill-composer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-composer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
P0 — Autonomous Multi-Step Workflow Chains Seal: DITEMPA BUKAN DIBERI · 2026-03-27
The gap between B+ (81.8%) and A (90%+) is autonomy — the ability to chain a multi-step workflow without asking Arif for permission at every step. The skill-composer is the orchestration layer that:
Why this is P0: Without this, agents are slaves to the step-by-step prompt. Arif must babysit every research, every code change, every verification. The opencode catastrophe happened because an unanchored agent was given too much rope and no governance layer to stop it from hanging itself.
GOAL → deep-research → evidence-map → judgment → reportUsed for: Understanding a system, investigating an issue, fact-finding Constitutional gates: F2 (Truth ≥0.99), F7 (Humility band), F3 (Tri-Witness)
GOAL → architect-explainer → plan → constitutional-check → forge → postcheck-verifier → vault-writerUsed for: New features, configuration changes, deployments Constitutional gates: F1 (Reversibility), F11 (CommandAuth), F13 (Sovereign veto)
GOAL → health-probe → diagnosis → rollback-governor → verify → sealUsed for: Incident response, service recovery, rollback Constitutional gates: F1 (Amanah reversibility), F12 (Injection defense)
GOAL → arifos-status → constitutional-check → judgment → report → vaultUsed for: Security audits, constitutional compliance reviews Constitutional gates: F3 (Tri-Witness), F8 (GENIUS gate), F12 (Injection)
Run arif-init-wrapper before any composition.
For the given goal, identify:
# Example decomposition for "Fix the broken main branch"
cat << 'EOF'
CHAIN: Recovery Chain (Type C)
STEPS:
1. health-probe → F1, F2 (verify current state)
2. diagnosis → F2, F7 (what is actually broken)
3. architect-explainer → F13 (present plan to Arif)
4. constitutional-check → F1-F13 (full floor review)
5. [VETO POINT] → F13 Arif decides: proceed or not
6. recovery-execute → F1 (reversibility path prepared)
7. postcheck-verifier → F2 (prove outcome, not just logs)
8. vault-writer → F1 (seal the scar)
REVERSIBILITY: Each step has rollback path except steps 6-8.
VETO POINTS: Step 5 (before execution), step 6 (before commit).
EOF# Execute each step with constitutional gate
for step in $STEPS; do
# Check constitutional fitness before running
constitutional-check tool=$step 2>/dev/null || {
echo "[GATE FAIL] $step failed constitutional check"
echo "[ACTION] Report to Arif. Do not proceed."
break
}
# Execute step
$step || {
echo "[STEP FAIL] $step failed with exit code $?"
echo "[ACTION] Trigger recovery chain or halt"
break
}
# Verify step outcome
postcheck-verifier step=$step || {
echo "[VERIFY FAIL] $step completed but outcome not proven"
break
}
doneBefore moving from research → plan, plan → execute, execute → verify:
# Constitutional gate between phases
arifosmcp_call tool=constitutional_check payload='{
"from_phase": "research",
"to_phase": "plan",
"evidence": [...],
"floors_activated": ["F2", "F3", "F7"]
}'If the gate returns VOID → HALT and escalate to Arif.
Before any irreversible action, stop and present:
═══════════════════════════════════════════════
F13 SOVEREIGN VETO POINT
═══════════════════════════════════════════════
CHAIN: {type}
CURRENT STEP: {step N of M}
NEXT ACTION: {what happens if you approve}
WHAT COULD GO WRONG:
• {risk 1}
• {risk 2}
ROLLBACK PATH: {how to undo if this fails}
ARIF DECIDES:
○ APPROVE — proceed to next step
○ MODIFY — change something before proceeding
○ STOP — halt the chain here
○ 888_HOLD — escalate for deep review
═══════════════════════════════════════════════# Execute the action
execute_step 2>&1 | tee /tmp/chain_output.log
# Prove it worked (not just "exit code 0")
postcheck-verifier step=$step actual_outcome=$(cat /tmp/chain_output.log) || {
echo "[CRITICAL] $step claimed success but outcome not verified"
echo "[ACTION] Rollback or escalate"
rollback-governor step=$step
}# Seal the chain outcome
vault-writer session=$SESSION_ID chain=$CHAIN_TYPE outcome=$OUTCOME scars=$SCARS
# Update memory with new context
arifosmcp_call tool=memory_archivist payload='{
"event": "chain_completed",
"type": "'$CHAIN_TYPE'",
"outcome": "'$OUTCOME'",
"timestamp": "'$(date -Iseconds)'"
}'| Stage | Floors Active | Gate |
|---|---|---|
| Research (111) | F2, F3, F7 | Evidence must pass F2 ≥0.99 |
| Plan (222) | F1, F4, F7, F13 | Plan must be reversible or hold |
| Judge (888) | F1-F13 | Full constitutional verdict |
| Forge (777) | F1, F11, F12 | CommandAuth verified |
| Execute | F1, F4, F12 | Injection scan, reversibility ready |
| Verify | F2 | Outcome proof, not assumption |
| Vault (999) | F1 | Immutable seal |
| Floor | How Enforced |
|---|---|
| F1 Amanah | Reversibility path stated at start of every chain |
| F2 Truth ≥0.99 | Each step's evidence must meet threshold |
| F3 Tri-Witness | High-stakes chains require human × AI × evidence |
| F7 Humility [0.03–0.05] | Uncertainty bands on every judgment |
| F13 Sovereign | Veto point before any irreversible action |
skill-composer — Forged 2026-03-27 · DITEMPA BUKAN DIBERI · Autonomous Workflow Chains 🔐
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.