closing-stale-packets — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited closing-stale-packets (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A change packet that is started and then abandoned is a quiet integrity problem. It looks like work in progress, but no one owns it, its claims were never proven, and a reader cannot tell whether the change shipped, was dropped, or is still pending. ng status now surfaces these: a scaffold packet is an untouched draft still carrying the placeholder marker; an invalid packet fails validation for another reason. This skill turns that signal into a decision. Every stale packet must reach one honest terminal state: completed (filled and validating), closed (deliberately abandoned with a recorded reason), or deleted (never a real change). The forbidden state is the one most packets drift into: half-done and silent, where a green-looking directory hides an unproven claim. Closing a packet with a written rationale is a first-class successful outcome, not a failure to ship.
ng status ./validate output and the packet against its originating issue/PR/anchor -> a NUCLEAR-GRADE-CLOSED: rationale line and an ng status . where every packet is ok or closed.ng status reports ok/closed, not scaffold/invalid.ng status reports a scaffold or invalid packet and you are deciding what to do about it..nuclear/changes/.python tools/ng.py status . (packet names, modes, and health tags)..nuclear/changes/<slug> and its files.python tools/ng.py validate .nuclear/changes/<slug>) for an invalid packet.ng status . and note every packet not tagged ok.validate pass.NUCLEAR-GRADE-CLOSED: line carrying the rationale (why it was dropped, what replaced it if anything, who decided) on that same line, and keep the packet as a recorded decision. ng status recognizes that marker line and reports the packet as closed, a terminal state.NUCLEAR-GRADE-CLOSED: line in the packet (for close), plus an OPEX note when the abandonment is a near miss worth learning from.ng status . and confirm every packet is now ok or closed, with none left in the half-done-and-silent scaffold/invalid state.ok), closed, or deleted.NUCLEAR-GRADE-CLOSED: rationale line recording why a packet was abandoned and who decided, for every closed packet.ng status . in which every packet is ok or closed, with no scaffold or invalid packet left needing attention.ng status . shows every remaining packet as ok or closed; none is left in the scaffold/invalid needs-attention state.NUCLEAR-GRADE-CLOSED: line names why it was dropped and who decided, not just that it was dropped.python tools/ng.py validate; the placeholder marker is gone because the packet is filled, not because the marker was deleted to fake a pass.learning-from-experience, not a cleanup task.ng status shows scaffold or invalid packets that no one can explain.Bring a stale Nuclear-grade change packet to an honest terminal state.
Inputs:
- ng status output (packet name, mode, health tag):
- packet path (.nuclear/changes/<slug>):
- originating issue / PR / anchor:
- is the underlying change still wanted? yes / no / unknown:
Do this:
- Establish ownership and intent before acting.
- Choose exactly one terminal state:
- COMPLETE: change is still wanted; fill the prompts that matter, remove the
placeholder marker because the packet is filled, and make validate pass.
- CLOSE: change was deliberately abandoned; add a `NUCLEAR-GRADE-CLOSED:` marker
line with the rationale (why dropped, what replaced it if anything, who decided)
and keep the packet as a record. `ng status` then reports it as `closed`.
- DELETE: it was never a real change (empty scaffold, nothing to learn); remove
the directory so it stops looking like work.
- Prefer CLOSE over DELETE when any rationale is worth preserving.
- Do not fake a pass by deleting the marker on an unfilled packet.
Return the chosen state, the closure note (for CLOSE), and confirmation that
ng status no longer shows an unexplained scaffold or invalid packet.
Do not imply formal assurance, compliance, certification, safety, security, or regulatory adequacy.This skill is an original software workflow influenced by configuration-management closure discipline and the work-control and self-checking practices in DOE-HDBK-1028-2009 mapped in docs/00-standards-foundation/source-map.md. It does not create DOE compliance, formal assurance, safety, security, certification, or regulatory adequacy.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.