done — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited done (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Finalize a completed task: verify tests pass, commit changes, update MASTER_PLAN.md, and push.
/master-plan:done - Main commandRun git status to see what files were modified:
git status
git diff --statOutput immediately:
Files changed:
- [list of modified files]Use AskUserQuestion to collect:
Then ask in plain text: "What's a brief summary of the changes? (1-2 sentences)"
IMPORTANT: Wait for user to provide the summary before proceeding.
Detect and run the project's test command. Check in order:
package.json exists → npm testCargo.toml exists → cargo testpyproject.toml or setup.py exists → pytestMakefile with test target → make testgo.mod exists → go test ./...If tests fail: STOP immediately. Report failures. Do NOT proceed. If tests pass: Continue. If no test command found: Warn user and continue.
Skip this step if user selected "Quick fix (no task ID)".
CRITICAL: Tasks may appear in multiple locations. Update ALL of them:
#### 4a. Summary/Roadmap Table
Find the task row and update:
# Before:
| **TASK-XXX** | **Title** | **P2** | PLANNED | ... |
# After:
| ~~**TASK-XXX**~~ | ✅ **Title** | **P2** | ✅ DONE (YYYY-MM-DD) | ... |#### 4b. Subtask/Bullet Lists
# Before:
- TASK-XXX: Description
# After:
- ~~TASK-XXX~~: ✅ Description#### 4c. Detailed Section Header
# Before:
### TASK-XXX: Title (IN PROGRESS)
# After:
### ~~TASK-XXX~~: Title (✅ DONE)#### 4d. Verify All Updated
Search for the task ID and confirm all occurrences show strikethrough or ✅ DONE:
grep "TASK-XXX" docs/MASTER_PLAN.mdStage all relevant files. NEVER commit:
.env* filescredentials*.json or files containing secretsnode_modules/, __pycache__/, target/, .venv/Prefer staging specific files by name over git add -A.
# Stage code files
git add <changed-files>
git add docs/MASTER_PLAN.md # if tracked task
# Commit
git commit -m "$(cat <<'EOF'
feat(TASK-XXX): Brief summary from user
- Key change 1
- Key change 2
Co-Authored-By: Claude <[email protected]>
EOF
)"
# Push
git pushFor quick fixes (no task ID):
git commit -m "$(cat <<'EOF'
fix: Brief summary from user
Co-Authored-By: Claude <[email protected]>
EOF
)"
git pushCommit prefix conventions:
feat(TASK-XXX): — New featurefix(BUG-XXX): — Bug fixchore(TASK-XXX): — Maintenancerefactor(TASK-XXX): — Code refactoringdocs(TASK-XXX): — Documentation onlyOutput this summary:
## Task Complete
- **Task**: TASK-XXX (or "Quick fix")
- **Summary**: [user's summary]
- **Tests**: ✅ Passed (or ⏭️ Skipped)
- **Commit**: [short hash] — [message]
- **Push**: ✅ Pushed to origin
- **MASTER_PLAN.md**: Updated / N/A.env* files (secrets)credentials*.jsonnode_modules/, dist/, __pycache__/).DS_Store, Thumbs.db)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.