launchd-drift-recovery — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited launchd-drift-recovery (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
out=$(bash ~/.openclaw/skills/launchd-drift-recovery/check.sh)
echo "$out"
status=$(echo "$out" | grep -oE 'STATUS=(GREEN|YELLOW|RED)' | cut -d= -f2)
if [ "$status" != "GREEN" ]; then
detail=$(echo "$out" | sed 's/.*detail=//')
# Try kickstart -k for each drifted plist (parse "name=state" tokens)
for token in $(echo "$detail" | tr ',' ' '); do
plist=$(echo "$token" | cut -d= -f1)
[ -z "$plist" ] && continue
[ "$plist" = "drifted:" ] && continue
# Trust-graph check
CHECK=$(python3 ~/Dev/daily-ai-agent-os/tools/approvals/resolve_gate.py \
--check-autonomous --skill launchd-drift-recovery --domain service_restart \
--usd 0 --reversibility hard 2>/dev/null)
AUTO=$(echo "$CHECK" | jq -r '.autonomous')
if [ "$AUTO" = "true" ]; then
echo " auto-kickstart $plist"
launchctl kickstart -k "gui/$(id -u)/$plist" 2>&1 | head -3
else
python3 ~/Dev/daily-ai-agent-os/tools/notify/telegram_send.py \
--text "[launchd-drift] $plist drifted; trust-graph denied auto-fix: $(echo $CHECK | jq -r '.reason')" 2>/dev/null || true
fi
done
fi~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.