fai-health-check-implement — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fai-health-check-implement (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
| Endpoint | Purpose |
|---|---|
| /health/live | Process is running |
| /health/ready | App can serve requests |
| /health/deps | Dependency status details |
{
"status": "healthy",
"timestamp": "2026-04-14T10:00:00Z",
"checks": {
"openai": "healthy",
"search": "healthy",
"redis": "degraded"
},
"degraded_mode": true
}app.get('/health/live', (_req, res) => res.status(200).json({ status: 'alive' }));
app.get('/health/ready', async (_req, res) => {
const checks = await runReadinessChecks();
const unhealthy = Object.values(checks).some(v => v === 'unhealthy');
res.status(unhealthy ? 503 : 200).json({ status: unhealthy ? 'unhealthy' : 'healthy', checks });
});| Check | Expected |
|---|---|
| Liveness endpoint | Always fast and stable |
| Readiness endpoint | Reflects dependency failures |
| Probe timeout | Prevents hanging checks |
| Status codes | 200 healthy, 503 unhealthy |
| Issue | Cause | Fix |
|---|---|---|
| Readiness always unhealthy | Blocking optional dependency | Mark optional dependencies as degraded, not failed |
| Probe latency spikes | Serial dependency checks | Run probes in parallel with timeouts |
| False healthy state | Cached stale probe results | Add short TTL and fresh probes for readiness |
# Example verification sequence
npm run lint
npm test
npm run build{
"quality_gate": {
"required": true,
"min_score": 0.8,
"block_on_failure": true
}
}| Control | Requirement |
|---|---|
| Secret handling | No plaintext secrets in repo |
| Access model | Least privilege role assignments |
| Logging | Redact sensitive data before persistence |
| Auditability | Keep immutable trace of critical actions |
| Symptom | Likely Cause | Recommended Action |
|---|---|---|
| Validation gate failures | Threshold too strict or wrong baseline | Recalibrate using a fixed reference dataset |
| Unexpected regressions | Missing scenario coverage | Add targeted regression tests and rerun |
| Production-only issues | Environment mismatch | Diff environment config and identity settings |
| Slow recovery during incidents | Unclear ownership/runbook steps | Add explicit owner and sequence in runbook |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.