engineering-standards — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited engineering-standards (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A design and implementation methodology that combines the wisdom of legendary programmers with concrete standards for writing code that is readable, maintainable, and built to last.
Six foundational perspectives guide every design and implementation decision:
without side effects. Complexity is the root of most software problems.
abstraction. Maintain clear strategies to measure and reason about performance.
faults in one module do not propagate to others.
Choose clarity before cleverness.
See skills/solid-principles/SKILL.md for full LSP treatment and depth.
interfaces. Pull complexity downward into implementations rather than exposing it to callers.
has an ongoing cost — maintenance, runtime, false-positive triage, cognitive load. A test that catches no real bug and slows the build is a liability, not an asset. The same applies to abstractions — premature DRY couples behaviors that need to evolve independently. Apply the Rule of Three: tolerate duplication the second time, extract on the third occurrence.
the third time.
clearer than a complex abstraction.
under 20 lines.
"what".
that aids comprehension.
during an incident.
skills/solid-principles/SKILL.md for full SRP depth.
contracts.
Follow these five steps for every non-trivial implementation:
requirements, edge cases, and constraints. Edge case enumeration is mandatory, not aspirational — walk boundary values (empty/zero/max), invalid inputs, failure paths (timeouts, partial writes), concurrency, authorization edges, and resource limits before implementation. Ask questions if anything is ambiguous.
boundaries before implementation. Think about how components will communicate and where the seams are.
should leave the codebase in a working state. Commit at each checkpoint.
Look for unnecessary complexity, potential bugs, naming that could be clearer, and duplication that should be extracted.
and trade-offs made. Document non-obvious choices so future readers understand the reasoning.
Before considering any implementation complete, verify each item:
allocation, but no premature optimization either.
logic; a thin shell handles I/O. Pure logic is unit-testable in isolation; the shell is swap-and-test as a thin integration layer.
EmailAddress, OrderId) carry a type, not a raw string/int. Long parameter lists with related primitives signal a missing value object.
failing condition with enough context that the next reader can start debugging without rerunning. Avoid assert(predicate) when assert_eq(actual, expected) would print the values.
Apply this methodology during code writing with these checkpoints:
interfaces and boundaries first, then implement incrementally.
9 items is a gate -- if any item fails, fix it before moving on.
ask: does this favor simplicity (Hickey)? Is it direct (Carmack)? Are failures isolated (Armstrong)? Is it readable (Knuth)? Does it honor contracts (Liskov)? Is the interface simple (Ousterhout)?
function size, reusability, maintainability, and testability standards as concrete guidelines -- not aspirational goals.
checklist on every file you touch.
Use this methodology as review criteria:
all 9 items for every changed file. Flag violations by checklist item name (e.g., "issue: Clear Naming -- this variable name d does not reveal intent").
interfaces and boundaries, or does it look like it was written stream-of- consciousness? Lack of structure suggests the Design-First step was skipped.
isolation (Armstrong) or interface contracts (Liskov) are higher severity than formatting issues (Knuth).
(~20 line guideline), DRY compliance (Rule of Three), composition over inheritance, and testability seams.
actionable and traceable to a concrete standard.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.