team-implement — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited team-implement (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run the IMPLEMENT phase. Three internal sub-steps:
test-architect writes failing acceptance testsimplementer executes vertical slices withper-slice commits
$ARGUMENTS is the artifact directory: docs/plans/<id>/. If empty, the discovery block below resolves it.
The agents read:
$ARGUMENTS/plan.md — file-level steps and per-slice tests$ARGUMENTS/structure.md — slice ordering and verification checkpoints$ARGUMENTS/design.md — context for what each test should assert$ARGUMENTS/repos.md — repo scope (only present when the topic spansmore than one repository); the implementer cd's between worktrees as the plan steps require
$ARGUMENTS/task.md — intent (for the implementer when in standalone mode)Resolve the artifact directory by running this self-contained block (one bash call — agent threads reset cwd between calls):
# Three-tier artifact-directory discovery (archetype A).
# ID_RE + PHASE_FILES canonical from hooks/session-start-recover.mjs.
# PHASE_FILES recency mirrors findActiveTopic() in session-start-recover.mjs.
# NOTE: this block is duplicated across 8 skills by design (see docs/architecture.md); future: shared discover-topic.sh.
ID_RE='^([A-Za-z][A-Za-z0-9_]*-[0-9]+|[0-9]{4}-[0-9]{2}-[0-9]{2})-[a-z0-9][a-z0-9-]*$'
PHASE_FILES="task questions research design structure plan"
PRED="plan.md" # predecessor artifact this skill consumes
# Tier 1 — explicit: $ARGUMENTS names an existing dir → use verbatim.
if [ -n "$ARGUMENTS" ] && [ -d "$ARGUMENTS" ]; then
echo "$ARGUMENTS"; exit 0
fi
# Tier 2 — discover: newest ID_RE dir under docs/plans/ that holds PRED.
best=""; best_mtime=-1
# Assumes cwd is the repo/worktree root (where docs/plans/ lives).
for dir in docs/plans/*/; do
name="$(basename "$dir")"
printf '%s' "$name" | grep -qE "$ID_RE" || continue # ID_RE filter
[ -f "$dir$PRED" ] || continue # predecessor filter
m=-1
for p in $PHASE_FILES; do
f="$dir$p.md"
[ -f "$f" ] || continue # skip racing/absent
s="$(stat -f %m "$f" 2>/dev/null || stat -c %Y "$f" 2>/dev/null)" || continue
[ "${s:-0}" -gt "$m" ] && m="$s" # max-mtime over PHASE_FILES
done
[ "$m" -gt "$best_mtime" ] && { best_mtime="$m"; best="$dir"; }
done
[ -n "$best" ] && { echo "$best"; exit 0; }
# Tier 3 — none found: print nothing → fall to AskUserQuestion (prose below).$ARGUMENTS for the rest of thisskill (tier 1 explicit arg, or tier 2 discovery). When the path came from tier 2 (no explicit arg), announce the resolved directory to the user before proceeding, so an auto-picked topic is never silent.
docs/plans/holds plan.md), do not hard-error. Fire AskUserQuestion with a Setup header and labeled options:
/team-plan docs/plans/<id>/ to produce themissing plan.md.
docs/plans/<id>/ directorydirectly (run ls docs/plans/ to find your topic directory).
to implement. Derive a fresh <id> (date-prefixed kebab slug, the same way the questioner does), create docs/plans/<id>/task.md from that description, then proceed from the new directory in standalone mode.
Standalone mode — the resolved or provided directory has no plan.md, so the run starts from that directory's task.md instead. It triggers whenever tier 1 (explicit $ARGUMENTS), a user-provided path, or a freshly derived directory (from Describe the task) names a docs/plans/<id>/ that lacks plan.md. The directory is always defined in this case. If $ARGUMENTS/plan.md does not exist in it, run test-architect → implementer → reviewers from $ARGUMENTS/task.md alone.
Coordinate progress via TodoWrite. Seed: Test-architect → Mechanical gate → Implementer (per slice) → Review round 1. See skills/progress-tracking/SKILL.md for the per-step tracking convention agents follow within each phase.
Before any agent dispatch, decide where to work:
multi-repo mode. Confirm a worktree exists in every listed repo (read the ## Worktrees section). If any are missing, tell the user to run /team-worktree [docs/plans/<id>/] (the path is optional — discovery resolves it) and stop.
git rev-parse --absolute-git-dir. If the path contains/worktrees/, you are already inside a Claude Code worktree — proceed in place. In multi-repo mode this should be the home repo's worktree; the implementer cd's into the other repos' worktrees as the plan steps require.
AskUserQuestion to askwhere to run the implementation. Use a single question with a Worktree header and these options:
git worktree (or set of worktrees in multi-repo mode).
tree.
<id> from the resolved directory, create theworktree(s) via /team-worktree [docs/plans/<id>/], tell the user the home worktree path, and ask them to re-run /team-implement [docs/plans/<id>/] from that directory.
in-place if repos.md is present and tell the user that multi-repo work requires worktrees.)
$ARGUMENTS/plan.md (resume mode) or bootstrap$ARGUMENTS/task.md (standalone mode).
test-architect → produces failing tests. In standalonemode it derives acceptance criteria from $ARGUMENTS/task.md instead of structure.md.
(not crashes). On crash, fix test infrastructure before proceeding.
implementer → executes slices with per-slice commits. Instandalone mode it works from $ARGUMENTS/task.md and the failing tests.
code-reviewer,security-reviewer, technical-writer, ux-reviewer, verifier.
skills/code-review/SKILL.md → "Severity Tiers and the Auto-Fix Boundary"):
security-review CRITICAL/HIGH, any verification failure,code-review REQUEST CHANGES, any issue (blocking) comment.
suggestion (non-blocking), security MEDIUM, ux-reviewerREQUEST CHANGES.
nitpick (non-blocking), security LOW, doc gaps,any COMMENT-level note.
test, review, suggestion, ux).
Review round <n+1> to the TodoWrite ledger.then re-dispatch ALL 5 reviewers for a fresh review.
this is the consult guard. A prompt that lists a blocking or major finding is a defect.
remain, present them to the user and let them decide (auto-fix, defer, or skip). Then:
PR phase item —/team seeded it): do not end the turn. Proceed directly to the PR phase (skills/team-pr/SKILL.md) in the same turn.
/team-pr.test-architect → mechanical gate → implementer → 5 reviewers → aggregate gate
↑ ↓ fail
└────── (specific fix) ──────┘
↓ pass
verification cleanMaximum 5 rounds. Each round is a complete re-review with fresh context — reviewers do not remember previous rounds.
Standalone mode skips the Question/Research/Design/Structure/Plan ceremony. You forfeit isolated research, human design alignment, and explicit slice breakdown. Use it when:
For larger features, prefer /team (full pipeline) for the alignment gates.
How the phase ends depends on how it was entered:
PR phase item —/team seeded it): present all review verdicts, then continue straight into the PR phase per skills/team-pr/SKILL.md — push the branch and open the draft PR in the same turn. Ending the turn with verdicts but no draft PR is a defect.
"Next: run `/team-pr docs/plans/<id>/`"
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.