resurrect-project — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited resurrect-project (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Help the user revive a dormant code project — with intention. The risk in resurrection is migrating yesterday's assumptions into today's rewrite; this skill's job is to interrupt that, force a fresh architectural conversation, and only then scaffold.
Four phases, run in order. Each phase has a dedicated flow file with full detail; pull the file in only when entering that phase.
log.md entry if the host has one, and end with a clear "next concrete step."The motion check happens in Phase 2 (Reflect), but the vocabulary is the skill's foundation — see references/vocabulary.md. These are not synonyms:
Primary spectrum (set during Phase 2):
Fine-grained variants (relevant once "ongoing" is chosen):
The interview depth, the scaffolding, and the project page's status: value differ across these. Confirm before proceeding past Phase 2.
Detect once, at the start of the survey phase. Run this check from the user's current working directory:
ls CLAUDE.md projects/ log.md 2>/dev/nullInterpret:
./RESURRECTION-<slug>.md or similar) and tell the user where.Do not hardcode any specific wiki's schema. The reference wiki this was built against is at /Users/brandt/codes/brandtam/mybot-dev but the skill must not assume it.
resurrect-old-repo skill — they're peers with different emphases; use whichever the user reaches for.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.