openplan-test — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited openplan-test (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this after $openplan-core when a task needs test strategy, regression proof, quality evidence, or auto/YOLO verification. Testing is evidence for the human and reviewer; it is not approval.
Tests must answer a risk question. Do not run broad commands just to create confidence theater, and do not claim success when the important risk was not exercised.
Use this skill when asked to:
Do not use it as a substitute for $openplan-review. Passing tests are input to review, not a review result.
references/framework.md: commands, dependencies, privilege/environment needs, skip behavior, failure diagnostics, and CI/release treatment.$openplan-review;$openplan-record;$openplan-garden;$openplan-handoff.A regression test that has not been shown to fail on the buggy behavior is provisional. Mark it as unproven regression coverage instead of calling it proven.
When the test depends on symbols introduced by the fix, construct an equivalent baseline-side test, fixture, trace, property, or oracle comparison that exercises the old failure mode.
BLOCKED or HUMAN_DECISION_REQUIRED according to whether the missing item is evidence or a human choice.Use references/output-contract.md for the report shape. Optionally validate a Markdown report:
python3 scripts/validate_test_report.py <report.md>references/framework.md: portable test layer framework.references/output-contract.md: report shape.assets/claude-code-command.md: Claude Code command/prompt seed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.