using-anvil — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited using-anvil (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
DG-Anvil enforces the Anvil loop as structural gates, not advisory prompts.
Five primitives: Contract, Plan, Loop, Ledger, Court.
Seven skills that compose the loop:
contracting - turn an intent into a machine-readable contract with four verification levels per criterion.planning - decompose the contract into an atomic task DAG with wave ordering; every task cites contract criterion ids.executing - dispatch a task to a fresh subagent in an isolated worktree.verifying - run the four verification probes (Exists, Substantive, Wired, Functional) against the task output.judging - dispatch the Court on evidence-only inputs to adjudicate the verification result.resetting - on fail, append a non-null lesson to the ledger and re-queue the task.authoring-skills - meta-skill governing how skills themselves are written, reviewed, and retired.Five commands surfaced by the plugin:
/start - begin a run: draft and confirm the contract, then produce the plan./continue - resume the loop at the next task./ship - finalize and integrate passing work./abort - stop the run, capture a lesson if appropriate./ledger - query the global lesson ledger.Invoking the Anvil CLI: the CLI binary is cli/anvil.js inside the plugin directory and is NOT on PATH. Always invoke it as node "$CLAUDE_PLUGIN_ROOT/cli/anvil.js" <subcommand> .... Every command example in every skill should be read this way.
Loaded by hooks/session-start on every fresh Claude Code session and after any /clear or /compact. Re-load it at the start of any sub-session where the contract must be rehydrated into context.
./anvil/contract.yml. If absent, route to contracting../anvil/plan.yml. If absent, route to planning.executing in a fresh worktree.verifying against all four levels named on the criterion.judging; otherwise mark the task verified.resetting: append a non-null lesson, re-queue the task./ship.Reject the following shortcuts (failure-taxonomy row citations in parentheses):
If any of these conditions obtain, stop and route back to the loop:
Check the current loop state with node "$CLAUDE_PLUGIN_ROOT/cli/anvil.js" contract --validate anvil/contract.yml and node "$CLAUDE_PLUGIN_ROOT/cli/anvil.js" plan --validate anvil/plan.yml --contract anvil/contract.yml. Both must exit 0 for the loop to proceed. If either exits non-zero, the structured error names the failing invariant and the skill to route to.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.