feature-flags — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited feature-flags (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
SDK code, targeting rules syntax and dashboard integration drift on each vendor release and are canonical at:
| Type | Purpose | Lifetime |
|---|---|---|
| Release toggle | Deploy inactive code; flip on after smoke test | Short (days/weeks) |
| Experiment toggle | A/B test; emits exposure events for analysis | Bounded by experiment duration |
| Ops toggle | Circuit breakers, kill switches, degraded modes | Long-lived |
| Permission toggle | Feature gating by role/plan/cohort | Permanent (treat like config) |
Choose by lifetime: short → cheap implementation, long-lived → invest in observability + naming discipline.
qa-tech-debt.<scope>_<feature>_<variant> (e.g. checkout_express_enabled). Scope-first sorts/filters cleanly in dashboards.growth-ab-test skill — experiment design, sample-size, exposure analysis (consumes experiment toggles)qa-tech-debt — flag-debt scan surfaces stale flags past the 2-sprint windowdev-tdd — flag-gated code paths must be tested in BOTH states (on/off), not just the new path~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.