fai-what-context-needed — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fai-what-context-needed (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Identify exactly what information is required before implementation to avoid low-quality or hallucinated output.
| Dimension | Why It Matters |
|---|---|
| Code scope | Determines affected files and boundaries |
| Interfaces/contracts | Prevents breaking public APIs |
| Runtime constraints | Affects architecture and dependencies |
| Security/compliance | Prevents unsafe implementation choices |
| Quality bar | Defines done criteria |
Classify the request as one of:
{
"required": [
"entry files",
"calling interfaces",
"config and environment assumptions",
"tests or evaluation criteria"
],
"optional": [
"architecture docs",
"performance baselines",
"release constraints"
]
}| Priority | Context Item | Impact |
|---|---|---|
| P0 | Public interface definitions | Breakage risk |
| P0 | Existing tests and expected behavior | Regression risk |
| P1 | Deployment/runtime constraints | Operability risk |
| P2 | Supporting docs | Speed/clarity improvement |
Context is sufficient when:
Need before implementation:
1) Entry point file(s)
2) Current contract/schema
3) Constraints (runtime, policy, latency)
4) Acceptance test cases| Issue | Cause | Fix |
|---|---|---|
| AI output too generic | Missing concrete code context | Provide file-level references and interfaces |
| Regressions after change | No behavior baseline | Add explicit acceptance tests first |
| Over-collection of context | No prioritization | Apply P0/P1/P2 ranking before reading |
# Example verification sequence
npm run lint
npm test
npm run build{
"quality_gate": {
"required": true,
"min_score": 0.8,
"block_on_failure": true
}
}| Control | Requirement |
|---|---|
| Secret handling | No plaintext secrets in repo |
| Access model | Least privilege role assignments |
| Logging | Redact sensitive data before persistence |
| Auditability | Keep immutable trace of critical actions |
| Symptom | Likely Cause | Recommended Action |
|---|---|---|
| Validation gate failures | Threshold too strict or wrong baseline | Recalibrate using a fixed reference dataset |
| Unexpected regressions | Missing scenario coverage | Add targeted regression tests and rerun |
| Production-only issues | Environment mismatch | Diff environment config and identity settings |
| Slow recovery during incidents | Unclear ownership/runbook steps | Add explicit owner and sequence in runbook |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.