fai-agent-chain-configure — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fai-agent-chain-configure (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill defines a production-ready workflow for configuring the builder→reviewer→tuner agent triad for solution plays, including role definitions, model assignment, handoff protocols, token budgets, and evaluation gates. It enforces full six-phase coverage, WAF-aligned quality gates, and reproducible delivery outcomes.
| Input | Description |
|---|---|
| Play ID | Target solution play identifier (e.g., 01-enterprise-rag) |
| Token budget | Total token allocation for the chain (default 100K) |
| Model preferences | Model per role — builder: gpt-4o, reviewer/tuner: gpt-4o-mini |
| Evaluation thresholds | Pass rates and blocking categories per gate |
fai-manifest.json..github/agents/ directory exists.# .github/agents/builder.agent.md
---
description: "Implements the solution — code, infra, config, tests"
model: ["gpt-4o", "gpt-4o-mini"]
tools: ["codebase", "terminal", "github"]
waf: ["reliability", "security", "performance-efficiency"]
---# .github/agents/reviewer.agent.md
---
description: "Audits builder output for security, WAF compliance, and quality"
model: ["gpt-4o-mini", "gpt-4o"]
tools: ["codebase"]
waf: ["security", "operational-excellence", "responsible-ai"]
---# .github/agents/tuner.agent.md
---
description: "Validates production readiness — config, thresholds, guardrails"
model: ["gpt-4o-mini", "gpt-4o"]
tools: ["codebase"]
waf: ["cost-optimization", "responsible-ai", "reliability"]
---{
"handoff": {
"from": "builder",
"to": "reviewer",
"play": "01-enterprise-rag",
"files_changed": ["src/rag.py", "infra/main.bicep"],
"assumptions": ["Using text-embedding-3-small"],
"token_budget_remaining": 25000
}
}.agent.md files in .github/agents/.fai-manifest.json:{
"primitives": {
"agents": [
"./.github/agents/builder.agent.md",
"./.github/agents/reviewer.agent.md",
"./.github/agents/tuner.agent.md"
]
}
}{
"toolkit": {
"tunekit": {
"token_budget": {
"total": 100000,
"builder": 60000,
"reviewer": 25000,
"tuner": 15000
}
}
}
}@-mentions match the filename stem.@builder, @reviewer, @tuner.| Artifact | Purpose |
|---|---|
| Implementation artifacts | Code, config, and infrastructure files |
| Validation evidence | Test results, compliance checks, quality metrics |
| Rollback guide | Step-by-step reversal and mitigation procedures |
| Operate handoff | Monitoring setup, ownership, and escalation paths |
The skill is complete when all six phases have objective evidence, quality gates pass, and another engineer can reproduce outcomes without tribal knowledge.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.