team-question — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited team-question (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Run the QUESTION phase only, then stop. The Question phase decomposes the user's intent into the artifacts that the rest of the QRSPI pipeline consumes:
task.md — the human's full intent. Read by design-author anddownstream phases that need intent. Never read by researcher or file-finder — they only see questions.md.
questions.md — neutral research questions phrased without intent. Theonly file researcher and file-finder ever read.
repos.md — written **only when the topic spans more than onerepository**. Lists each involved repo's slug, absolute path, and role. Its presence switches the rest of the pipeline into multi-repo mode (one worktree per repo, slice/step [repo: <slug>] annotations, one PR per repo). See skills/qrspi-workflow/SKILL.md for the schema and agents/questioner.md for the detection rules.
These files live in docs/plans/<id>/ where <id> is either a ticket-derived slug (ENG-1234-add-rate-limiting) or a date-derived slug (2026-05-01-add-rate-limiting).
$ARGUMENTS may be:
ENG-1234) — recorded as ticketId ontask.md's frontmatter. The orchestrator does not call any ticketing system; the ID is stored for the user's reference.
https://github.com/org/repo/issues/42) — fetchedwith gh issue view (or equivalent) to extract the title and body before decomposition.
When $ARGUMENTS is empty, discover, don't demand: ground in repo context before asking. Read recent git log activity and the repo's README / CLAUDE.md to propose a likely topic, then use AskUserQuestion with labeled options to fill any genuine gap in intent. Never bare-stop with a plain "describe it" demand when context is already available.
Follow skills/progress-tracking/SKILL.md: when this procedure has two or more steps, seed one todo item per step before starting and mark each complete as you go.$ARGUMENTS: ground in repo context, then ask only for genuinegaps, per the "discover, don't demand" rule in ## Input.
they have configured to fetch the issue body.
gh issue view <url> --json title,body and use thetitle plus body as the description.
<TICKET>-<kebab-topic> (e.g.,ENG-1234-add-rate-limiting).
<YYYY-MM-DD>-<kebab-topic> (e.g.,2026-05-01-add-rate-limiting).
<kebab-topic> is a 2–4 word kebab-case slug derived from thedescription.
docs/plans/<id>/task.md already exists,re-read it instead of overwriting; if questions.md is missing, the questioner only writes questions.md.
questioner agent with the full description and thetarget directory docs/plans/<id>/. The agent writes task.md and questions.md, plus repos.md when it confirms with the user that the topic spans multiple repos.
continue to RESEARCH. (repos.md may also exist if multi-repo was confirmed; that does not change the stop condition.)
committing to research.
task.md / questions.md by hand beforeresearch begins.
re-decomposing.
Report:
task.md and questions.md (and repos.md when written)<id>if multi-repo)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.