skill-lifecycle — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-lifecycle (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this when a repeated workflow should become a skill, or when an existing skill fails and needs to be updated.
Use this skill when the user says:
skills/INDEX.md?| Situation | Action |
|---|---|
| New repeated workflow | Create a new skill |
| Existing skill missed a step | Update the existing skill |
| Trigger wording changed | Update the skill and skills/INDEX.md |
| Output format changed | Update the skill, examples, and downstream references |
| Workflow is one-off | Do not create a skill; answer directly |
publish-report.Checkpoint: the name is unique in skills/INDEX.md.
Write these five fields before drafting:
Checkpoint: each field has a concrete answer.
SKILL.mdUse this template:
---
name: "skill-name"
description: "Trigger + output in one sentence."
dependencies:
tools: []
files: []
skills: []
---
# Skill Title
> One-sentence purpose.
## Triggers
- Use when...
## Preflight
- [ ] Required condition
## Steps
### Step 1: ...
- Action
- Must: non-negotiable rule
Checkpoint: how to know this step is complete.
## Verification
- [ ] Final check
## Failure Handling
- If X fails, do Y.
## Version History
- v1 (YYYY-MM-DD): Initial version.Add:
Checkpoint: a weaker model can follow the skill without relying on hidden context.
Update skills/INDEX.md with:
| `skill-name` | trigger | output | `skills/skill-name/SKILL.md` |Checkpoint: the new skill can be found from the index.
Add an entry to feedback/log.md explaining why this skill was created.
Checkpoint: the log entry has an Updated: line.
Classify the update:
| Type | Symptom | Likely Update |
|---|---|---|
| Rule gap | Agent skipped or misread a step | Add a Must rule or checkpoint |
| Trigger gap | Skill should have been used but was not | Update trigger wording and index |
| Output drift | Output fields changed or became inconsistent | Update format and examples |
| Tool/env issue | The skill assumes a missing tool or wrong path | Update dependencies and env memory |
Checkpoint: the failure type is named before editing.
Read the full current SKILL.md before editing.
Checkpoint: you can summarize the current trigger, steps, and version history.
skills/INDEX.md.memory/env.md.Checkpoint: the edit matches the diagnosis.
Add one line:
- vN (YYYY-MM-DD): What changed and why.Checkpoint: old version history remains intact.
Add an entry to feedback/log.md, then use feedback/update-checklist.md.
Checkpoint: the log says exactly which files were updated.
skills/INDEX.md matches trigger and path.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.