meta-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited meta-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The thesis: AI agents writing arbitrary code is risky and unbounded. AI agents filling a structured template under hard validation is bounded and shippable. This skill is the demonstration: a tightly-shaped pipeline where the LLM authors only the parts of a new skill that humans would hand-write anyway, while the bash skeleton, error handling, and gate calls are generated deterministically.
bash skills/meta-skill/run.sh "I need a skill that watches X for Y and writes to Z"
bash skills/meta-skill/run.sh --dry-run "<problem>" # parse + validate, no writeskill_name (kebab-case, 3-6 words)owner_agent (one of: content, builder, ops, sales, research, accountant, trading, hermes)description (one sentence, voice-rule-compliant)pipeline_steps (3-7 numbered steps)trigger (cron / event / manual / on-skill-call)inputs (named parameters; empty list OK)outputs (paths or stdout shape)SOUL.md (intent + failure mode + voice anchor; 100-200 words).SKILL.md (frontmatter + procedure + status codes; static templatefilled with extracted fields).
run.sh (skeleton with proper error handling, voice-gate callsif outputs are text-bound, smoke-test stub, TODO markers for the actual pipeline body).
a. python3 tools/voice/score.py on the SKILL.md description → must score >= 60. b. python3 tools/voice/scrubber.py on the description → must pass. c. bash -n run.sh → must pass syntax check. d. Smoke-test: bash run.sh --dry-run → must exit non-error (rc != 2) and produce a STATUS= line.
~/.openclaw/skills/<name>/(or ~/.hermes/skills/<name>/ for hermes-owned).
data/proposed_skills/cont-17-meta/<name>/for Cooper review, with a _VALIDATION.md file detailing what failed.
{status, skill_path, smoke_test_result, gates_passed}.STATUS=ok skill=<name> path=<dir> (all gates passed, landed in runtime) STATUS=proposed skill=<name> path=<dir> failed=<comma-list> (some gate failed, landed in proposed/) STATUS=skip reason=<...> (Ollama down, etc.) STATUS=error reason=<...>
are short and don't need newsletter-tier polish).
TODO markers the human or a follow-up agent fills in. The meta-skill guarantees the shape and gates, not the substance.
generated skill is held to the same publishing standards as a hand-written one.
decision (which schedule? which environment?). The generated skill is callable via bash run.sh from day one but does not run on a cron until Cooper writes the plist.
A solo founder using DAI OS can speak a problem ("I need a thing that does X") into the system and walk away with a scaffolded skill in 60 seconds. The compounding loop the methodology describes is not hand-waving: this skill makes the catalog grow autonomously while keeping every output under the same gate disciplines as Cooper's hand-written skills.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.