coding-agent-pm — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited coding-agent-pm (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when a human is preparing, delegating, reviewing, or recovering implementation work done by Claude Code, Codex, OpenClaw, or another coding agent.
# Agent Brief
## Outcome
Ship:
## Scope
Owned files/modules:
Do not edit:
Forbidden actions:
- Do not run destructive git commands.
- Do not revert unrelated user changes.
## Context
Relevant files:
Existing patterns to follow:
## Acceptance Criteria
- [ ]
- [ ]
- [ ]
## Validation
Run:
Manual checks:
## Final Response Must Include
- Files changed
- Validation run and result
- Remaining risks or follow-upsReview in this order:
If the agent drifted, stop new edits and ask it to map each change back to the original acceptance criteria.
Use this when a coding agent's work is hard to trust:
Pause implementation. Map every changed file and every material change back to the original acceptance criteria. For each change, mark it as required, optional, or unrelated. Do not edit files until this map is complete.User: "Have a coding agent add OAuth login."
Better assignment:
Outcome: Add GitHub OAuth login to the existing auth flow.
Scope:
- Own: src/auth/*, src/routes/login.tsx, tests/auth/*
- Do not edit: billing, onboarding, database migrations unless a failing test proves it is required
Acceptance criteria:
- [ ] Existing email login still works.
- [ ] GitHub login creates or links a user through the existing auth service.
- [ ] Auth errors render through the existing form error pattern.
- [ ] Tests cover success, denied OAuth, and existing linked account.
Validation:
- npm test -- auth
- npm run lint~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.