octocode-rfc-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited octocode-rfc-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Produce evidence-backed decisions that an implementer and reviewer can execute. Flow: UNDERSTAND → RESEARCH → PREREQUISITES → COMPARE → WRITE → CLOSE QUESTIONS → KPI → VALIDATE → DELIVER. For existing RFCs, run REASSESS (see references/workflow.md § Reassess existing RFCs) instead of WRITE — audit against live code, not prior checkboxes.
RFC.md owns goals, scope, and decision. Other files link to its anchors rather than restating them..octocode/rfc/ (delete/implemented/fixed calls) always requires a dated ## Audit Reasoning block written into the RFC itself, backed by fresh reads of the live code.octocode-research); a brainstorming handoff is marked Prototype First, Narrow, Park, or not ready; uncertainty changes artifact shape, owner, scope, or tradeoff priority; two research attempts fail (state what is known and ask for direction); scope needs splitting into separate RFCs or phases; an unresolved blocker would have to be assumed satisfied; or a save, delete, or archive under .octocode/rfc/ awaits explicit approval.RFC.md with plan, acceptance, and inline references.<workspace>/.octocode/rfc/{name}/: RFC.md (decide), PREREQUISITES.md (ready, existing code only), IMPLEMENTATION.md (build), KPI.md (verify), and RESOURCES.md (source appendix).references/workflow.md — gates, claim ledger, artifact set, traceability, validation, and delivery order.references/octocode.md then references/research-playbook.md — delegate exact research and keep claims auditable.references/rfc-prerequisites.md before planning — expose baselines, blockers, owners, and setup.references/rfc-template.md — structure alternatives, goals/non-goals, reversibility, and pre-mortem.references/rfc-implementation.md — close open questions, order dependencies, and define rollout/rollback.references/rfc-kpi.md — connect user stories, metrics, decision rules, and verification in a traceability matrix.references/rfc-resources.md — record provenance without moving decisive citations out of the RFC.references/rfc-audit.md — the dated ## Audit Reasoning block, with live-code evidence, is required before any keep/fix/delete call.octocode-graph-eval; otherwise load references/improve-loop.md — enforce measurable accept/revert.octocode-brainstorming before RFC when worth-building is unresolved; octocode-research to close factual questions; octocode-graph-eval for KPI rigor.octocode-skills when changing this skill folder.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.