bugfix-tdd — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bugfix-tdd (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A bug fix without a failing test that reproduces it is a guess. Reproduce first — a red test that captures the bug — then fix until it is green. The test is the proof the bug existed and the guard that it stays fixed.
Announce at start: "Reproducing the bug with a failing test before fixing."
NO BUG FIX WITHOUT A TEST THAT REPRODUCES THE BUG AND FAILS FIRST.
Write the smallest test that exercises the buggy path and asserts the correct behavior. Run it. It MUST fail.
If you can't write a test that fails, you don't yet understand the bug. Keep investigating; don't fix blind.
Read the failure. Is it failing because of the actual bug, or because the test is wrong? A test that fails for the wrong reason proves nothing — fix the test until it fails for the bug's reason.
Make the minimal change that turns the test green. Don't expand scope; don't fix unrelated things in the same step.
| Thought | Reality |
|---|---|
| "I see the bug — I'll just fix it" | Then you have no proof it was the bug, or that it stays fixed. Red test first. |
| "I'll add the test after the fix" | After means never, and a test written green never proves it catches the bug. |
| "It's too hard to write a test for this" | Then you don't understand the bug yet. Keep digging. |
| "The fix is obvious" | Obvious fixes paper over symptoms. The failing test keeps you honest. |
Required next: bardak:no-silent-errors (don't let the fix add a silent failure) and bardak:pipeline-verification (verify the fix end to end, not just the new unit test).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.