test — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited test (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
| Situation | Steps |
|---|---|
run tests or a specific test path | 3 → 5 → 6 |
| The verification claim is already clear from the request or recent context | 4 → 5 → 6 |
| Behavioral claim but no tests exist | 1 → 4 manual path → 5 → 6 |
| Vague claim or broad change | Full flow |
Skip steps whose answers are already known from the conversation.
Figure out what must be true before running anything.
Possible sources:
Good claim: expired tokens return 401. Bad claim: the app works.
If the claim is mushy, sharpen it before you touch the tools. Weak claims create noisy verification.
Skip if the claim is already scoped.
Use the change set to identify:
For shared code, config, auth, schema, or similar cross-cutting changes, read references/regression-strategy.md before deciding how wide to test.
Check in this order:
CLAUDE.mdpackage.json, Makefile, justfile, TaskfilePrefer project-defined commands over raw framework commands.
Match the claim to the execution lane.
| Claim type | Lane |
|---|---|
| logic, transforms, business rules | direct tests |
| API behavior or contracts | backend verification |
| UI behavior or rendering | frontend verification |
| visual UI criteria | frontend visual verification |
| DB persistence | backend verification |
| CLI behavior | direct command verification |
| type or schema correctness | direct static verification |
| compile/build correctness | direct static/build verification |
Once you've picked a lane, read the relevant reference before executing. Let the reference own the execution details.
references/backend-verification.md — API, DB, services, and background jobsreferences/frontend-verification.md — browser, component, and visual verificationreferences/regression-strategy.md — how wide to test once the main claim is provenThe right method is the one that can disprove the claim fastest without pretending to offer more confidence than it really does.
If no relevant tests exist, use a manual path instead of calling the result inconclusive. Follow the selected lane's reference rather than rebuilding the checklist inline.
For command-line claims, run the command and inspect output directly.
Keep these guardrails in mind:
Only use INCONCLUSIVE when neither an automated path nor a manual path is feasible.
Before running verification, confirm required infra is already available. If a server, DB, queue worker, mock service, or migration is needed and not running, stop and tell the user the exact command to start it. Do not start it yourself.
When you run verification, capture evidence:
Start with the most direct proof. Expand into broader regression only when the blast radius justifies it.
Use this structure:
## Verification Report
**Claim**: {what was tested}
**Verdict**: CONFIRMED | REFUTED | PARTIAL | INCONCLUSIVE
### Evidence
- {command}: exit {code} — proves or refutes {deliverable}
### Failures
- {test or command}: {error snippet} — {what it means}
### Gaps
- {deliverable or regression area still unverified}
### Suite Stats
Total: X | Passed: X | Failed: X | Skipped: X | Duration: Xs
Coverage: Lines X% | Branches X% (if available)Use these verdicts consistently:
Prove the original failure no longer reproduces and check one regression ring around the changed area.
Prove the stated acceptance criteria and include type-check evidence when that meaningfully covers changed contracts.
Take the claim from the argument or, if needed, infer it from recent changes.
<target>$ARGUMENTS</target>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.