debug — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited debug (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Structured, hypothesis-driven debugging. No guessing. No "let me just try this." Every action has a reason, every observation narrows the search space.
The goal is not to fix the bug. The goal is to understand the bug. The fix follows naturally.
Rules:
Before investigating, nail down the observable symptoms.
Collect:
If recency is known: git log --oneline from the last known-good state. The diff between then and now is your search space.
If recency is unknown: Skip ahead, but flag this — you'll need to bisect later.
Output: A one-paragraph problem statement. Example:
"Thestorychief-push-drafttask returns 403 after the auth middleware refactor in commit abc123. It worked on commit def456. The error isForbidden: invalid API scope. Expected: draft pushes successfully."
Systematically reduce the search space. Pick the strategy that fits:
git diff <last-good>..<current> or specific files)git log --oneline <good>..<bad> then manually test the midpoint commitOutput: A specific location (file:line) or narrow area (2-3 files) where the bug lives.
Now you have a location. Form a hypothesis and test it — without changing production code yet.
Hypothesis format:
"The bug is caused by [specific mechanism] in [file:line]. This happens because [chain of causation]. If I'm right, then [testable prediction]."
Testing a hypothesis (pick one):
If the hypothesis is CONFIRMED: Move to Phase 4.
If the hypothesis is REJECTED:
Fix:
Verify:
Fix statement format:
"The bug was [root cause] in [file:line]. It was caused by [mechanism]. Fixed by [what you changed]. Verified by [what you ran]."
When this methodology is used by a sub-agent (e.g., a trailing verification agent in Ralph Review or audit):
The sub-agent MUST:
The parent agent MUST:
| Pattern | Why It's Banned | Do This Instead |
|---|---|---|
| "Let me try changing X and see if it works" | Guess-and-check doesn't build understanding | Form a hypothesis first, test it without code changes |
| Changing multiple things at once | Can't tell which change fixed it (or broke something else) | One change per cycle |
| "It works now, not sure why" | You'll be back here next week | Keep investigating until you can write the fix statement |
| Searching the whole codebase for the error string | Unfocused; wastes time | Use Phase 2 strategies to narrow first |
| "Probably a race condition / caching issue" | These are cop-out hypotheses | Be specific: which race? Which cache? What state? |
| Deleting and rewriting the broken code | Hides the bug instead of understanding it | Understand first, then decide if rewrite is warranted |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.