implementing-issues — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implementing-issues (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Copy this checklist and track progress:
Implementation Progress:
- [ ] Step 1: Read issue and understand scope
- [ ] Step 2: Create branch and draft PR
- [ ] Step 3: Break down into tasks
- [ ] Step 4: Execute tasks (parallel where possible)
- [ ] Step 5: Verify and finalizegh issue view <number> --json title,body,labels,milestoneExtract from the issue body:
If the issue is blocked by open issues, stop and inform the user.
Follow the branch/PR naming convention: <type>-<issue_number>-<short-description>
Type mapping: enhancement → feat, bug → fix, chore → chore
git checkout main && git pull origin main
git checkout -b <type>-<number>-<description>
git push -u origin <type>-<number>-<description>Create a draft PR immediately so progress is visible:
gh pr create --draft \
--title "<type>-<number>-<description>" \
--body "$(cat <<'EOF'
Closes #<number>
## Summary
- <to be updated on completion>
## Test Plan
<copy Test Plan table from issue, add Status column set to pending>
EOF
)"Analyze the issue scenarios and create a task breakdown. Save to .claude/plans/<issue_number>/tasks.json.
mkdir -p .claude/plans/<issue_number>See TASK-FORMAT.md for the JSON schema and decomposition rules.
Key rules:
Read .claude/plans/<issue_number>/tasks.json and identify which tasks can run in parallel (no shared files, no dependency between them).
For each task, spawn a sub-agent with:
Parallel execution rules:
parallel_group run simultaneouslydepends_on wait for dependencies to complete# After each task completes, update the task status
# The sub-agent commits its own changesAfter all tasks complete:
# Run linter and type checker — must pass before PR is marked ready
uv run ruff check .
uv run ty check
# Run full test suite
uv run pytest tests/ -v
# Update the draft PR to ready
gh pr ready <pr_number>If ruff, ty, or tests fail, fix the issues and commit before marking the PR ready.
Update the PR body with final summary and test plan status.
Always:
.claude/plans/<issue_number>/tasks.json before writing any codeuv run ruff check . and uv run ty check before marking PR ready — lint and type check must passAsk first:
Never:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.