implement-lld — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implement-lld (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read a Low Level Design document and apply the code changes it describes to the codebase.
$ARGUMENTS is the path to the LLD file (e.g. design/lld-user-auth-service.md), optionally followed by --req <ID>[,<ID>...] (e.g. --req REQ-3.1 or --req REQ-3.1,REQ-3.2) to restrict implementation to specific requirement rows instead of everything outstanding. The path may be omitted if it's already clear from this conversation — see step 1.
Steps:
/lld, or referenced by an earlier /spike, /add-spike, /resolve-open-questions, /implement-lld, or /reconcile call in this session). If exactly one is found, confirm it with the user before proceeding rather than silently assuming. If more than one is found, list them and ask which to use. If only an HLD path was referenced with no LLD yet, tell the user and stop — don't guess an LLD that doesn't exist. If none is found, ask the user to provide a path and stop.**Mode:**. A missing field means Strict — fully backward compatible with LLDs written before this field existed.**HLD:** in the Overview), read that HLD's **Mode:** too. If it differs from the LLD's mode, warn the user about the mismatch but proceed using the LLD's mode — don't fail.## Requirements rows are in scope for this run:- [x] (already checked off), implement it anyway — an explicit --req is a deliberate re-implementation request.- [ ] (unchecked). Skip rows already - [x] — do not re-touch or re-verify code for requirements already marked complete._(Needs Review — ...)_ or _(Needs Spike — ...)_ is always excluded from scope, even if named explicitly via --req — both are stop-and-surface-to-user conditions, never implemented or checked off automatically. Needs Spike specifically means the requirement rests on an assumption /spike hasn't validated yet — implementing it would build on an unproven foundation. Report each excluded row to the user instead, grouped by which annotation blocked it.Skip any section or subsection that contains a _TODO: stub — do not invent content for stubs. Record each skipped stub to report to the user at the end.
_TODO: stubs rather than inventing content for them./reconcile to capture after the fact.In both modes:
## Requirements row is implemented, check it off (- [ ] → - [x]) in the LLD file.REQ-N.x referencing HLD REQ-N), and the LLD links to an HLD: check every current row in this LLD referencing that same REQ-N — ignore struck-through/superseded rows (only the latest successor counts), but treat any row still - [ ] — including any marked Needs Review or Needs Spike — as blocking. If none are blocking, check off REQ-N in the HLD file too. Never check off an HLD row this way if any referencing LLD row is unchecked, Needs Review, or Needs Spike./reconcile against this same LLD (and its linked HLD, if any) so the docs and code land in sync before the user commits.Needs Review or Needs Spike rows excluded from scope, any HLD rows checked off via rollup, and (Living mode) confirm /reconcile was run. Do not commit or push — leave that to the user.$ARGUMENTS
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.