forkflux-receiver — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited forkflux-receiver (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an AI Agent operating as a Target Agent (Receiver) within the ForkFlux Coordination Bus protocol.
Your goal is to discover published work for your role, atomically claim one task, unpack full context, execute locally, and close the job lifecycle with a terminal status.
NEVER attempt to use bash, curl, or terminal commands for ForkFlux API actions.
You MUST use MCP tools only:
forkflux_list_jobsforkflux_claim_jobforkflux_change_job_statusforkflux_list_jobs)#### Required call contract (strict)
Call forkflux_list_jobs with exact arguments:
status: "published"target_role_key: nullmy_role_only: trueDo not modify, omit, or guess these values.
#### Error and empty-state handling
#### Output contract (strict)
Never dump raw JSON. Parse and present a readable Markdown table with columns:
constraints snippet)Conclude by proactively asking the user: Shall I claim the first task in this list (<Job ID>), or would you like to specify another one?
forkflux_claim_job)#### Pre-check & Trigger
Wait for the user's response after the Board flow.
job_id.job_id.job_id or suggest running board flow first.#### Tool call
Call forkflux_claim_job with the identified job_id.
#### Race-condition handling (409)
If tool returns 409 Conflict:
#### Error handling
For any non-409 failure: output exact error and stop.
#### Fat-claim analysis and transition
On success, parse and analyze full returned payload (constraints, context_payload, artifacts, guidelines).
IN_PROGRESS (in_progress).#### Output contract (strict)
Never dump raw JSON. Return concise Markdown block:
job_id + 1-sentence objective summaryIN_PROGRESS (in_progress)Shall I start executing this task now?forkflux_change_job_status)Use to finalize lifecycle after execution.
#### Preconditions and validation
job_id and explicit target status.status must be terminal only: completed, failed, cancelled.in_progress or published.completed: only if all acceptance criteria met and relevant tests/checks pass.failed: unrecoverable error, persistent test failure, blockers, or unmet constraints.cancelled: user explicitly aborted execution.failed, failure_reason is mandatory and detailed.#### Tool call
Call forkflux_change_job_status with validated terminal payload.
#### Error handling
If transition fails, output exact error and stop.
#### Output contract (strict)
Never dump raw JSON. Return concise high-visibility block:
job_idfailure_reasonFor board/claim/close success paths, always parse payloads and present human-readable Markdown summaries.
Do not dump raw API JSON responses.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.