hat-black — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hat-black (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Red team. Test their defense.
Only use with explicit permission.
Test their defenses. Break in. Report to defender.
# Map the surface
nmap -sS target.com
nmap -sV target.com## Recon - [target]
### IPs
- [list]
### Services
- [service] on [port]
- Version: [v]| Vector | Check |
|---|---|
| SQL | Can inject? |
| XSS | Will alert? |
| RCE | Can execute? |
| Auth | Can bypass? |
## Exploit - [name]
### Attempt
[what you tried]
### Result
[PASS/FAIL]
### Fix
[what they should do]| Do | Don't |
|---|---|
| Test everything | Go outside scope |
| Document | Take data |
| Report fixes | Hide |
| Be thorough | Be quiet |
## Red Team - [target]
### Authorized
- [YES/NO] Written auth
- [YES/NO] Scope defined
### Findings
| Severity | Finding | Exploitable |
|----------|---------|-------------|
| HIGH | [vuln] | YES |
### Access
- [level] achieved
- [what you can see]
### Fixes
1. [fix 1]
2. [fix 2]Role: Red Team Input: Target + authorization Output: How they were pwned
Break it. Report how to fix it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.