self-evolve — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited self-evolve (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ultrathink.
When scope is (none), or when pending proposals exist and user says "ok":
Fetching proposals:
python3 .claude/hooks/self-improve/self_improve_db.py resolve listUser attention is finite — showing 12 proposals when 4 are duplicates, 3 already exist in rules, and 2 are noise wastes their focus on what matters. Before presenting anything, read the existing config (.claude/rules/, CLAUDE.md, CLAUDE.local.md, active skills) to understand what's already there. Then filter: proposals already covered by existing rules, duplicates of each other, and low-value noise that wouldn't improve agent behavior. Merge proposals addressing the same pattern into one entry with the clearest rationale.
Tell the user what you filtered: "Showing X of Y proposals (Z filtered)."
After user finishes reviewing visible proposals, batch-reject the filtered ones:
python3 .claude/hooks/self-improve/self_improve_db.py resolve <id1>,<id2>,... rejectedFor each shown proposal, ask the user to approve or reject.
| Test | Question | If Yes |
|---|---|---|
| Rule test | "Will an agent still produce incorrect code without this, even with the skill active?" | → Rule (.claude/rules/) |
| Skill test | "Is this a repeatable process/workflow, not a constraint?" | → Skill — rare |
| On-demand ref | "Is this project-specific architecture/context, not a behavioral rule?" | → Reference file pointed from CLAUDE.md |
| Personal pref | "Is this specific to this user, not team-shared?" | → CLAUDE.local.md (gitignored) |
| Default | None clearly match? | → Rule (safest default) |
~80% of proposals become rules — the pipeline detects behavioral corrections, and corrections are rules by definition.
Read all files in the target location. Scan for semantic overlap — does an existing rule/section already cover this?
Writing quality — proposals describe specific incidents, but rules must work for the general case:
Use the proposal's rationale to construct a minimal replay prompt that would trigger the same mistake. Spawn a subagent with the new rule, give it the prompt, check if it avoids the failure. If it fails, revise once. If still fails, flag to user. Keep this fast — one prompt, one check.
python3 .claude/hooks/self-improve/self_improve_db.py resolve <id>[,<id>,...] approved # or rejectedTell the user: what was placed, where (file + section), why that location, and whether verification passed.
When invoked for rule reorganization (not proposals): read all .claude/rules/, identify duplicates/misplaced rules, propose consolidation plan, apply on approval.
When scope is full, skills, rules, claude-md, or quick. Also when (none) and no pending proposals found.
package.json, pyproject.toml, go.mod, or equivalent — know the stack.claude/settings.json — know what hooks are configured.claude/hooks/self-improve/ exists, check for pending proposals: python3 .claude/hooks/self-improve/self_improve_db.py resolve listRead references/quality-dimensions.md for mechanical check scripts, staleness signals, and conflict resolution rules. Then run per-component analysis — see references/audit-guide.md for the full checklist covering skills, rules, CLAUDE.md, CLAUDE.local.md, and hooks.
Severity: CRITICAL (wrong code/skill, broken refs) → fix. MODERATE (suboptimal output) → fix if easy. LOW (style) → report only.
Fix: broken refs, inaccurate facts, trigger overlaps, weak/stale rules, redundant cross-layer content, broken hooks, orphaned project refs. Don't fix: workflow skill descriptions (report for skill-creator), substantial completeness gaps (report as recommendation), things that work.
For each fix: re-read, re-run the specific check, confirm it passes. Check no new broken refs introduced.
Use the report template in references/audit-guide.md § Report Template. Health verdicts: HEALTHY (0 CRITICAL, ≤2 MODERATE) | NEEDS ATTENTION (unfixed MODERATE or 1 CRITICAL) | CRITICAL ISSUES (2+ CRITICAL).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.