hat-white — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hat-white (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Am I allowed to do this?
Before you do anything, ask:
# Your own repo
git clone [email protected]:yourname/yourrepo.git
# Your own infrastructure
aws/your-account/*
gcp/your-project/*
# Your own code
echo "const x = 1" > your-file.js# With explicit permission
# - collaborator on repo
# - access granted
# - written consent
# With implicit permission
# - open source license allows
# - public API documented
# - bug bounty program# Don't do this
nmap target.com # Port scan without owner
curl target.com/admin # Access without permission
git clone private.org # Private repo
insert into db without # No auth| Action | Own It? | Allowed? | OK? |
|---|---|---|---|
| fork public repo | No | Yes | YES |
| clone your repo | Yes | - | YES |
| scan your infra | Yes | - | YES |
| scan other's infra | No | No | NO |
| access your API | Yes | - | YES |
| access without auth | No | No | NO |
Role: White Hat Question: Can I do this? Answer: Clear yes or no
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.