signal-scanner — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited signal-scanner (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Scheduled scanner that detects buying signals on TAM companies and watchlist personas, writes them to the signals table, and sets up downstream activation.
SUPABASE_URL + SUPABASE_SERVICE_ROLE_KEY in .envAPIFY_TOKEN in .env (for Phase 2 signals)ANTHROPIC_API_KEY in .env (optional, for LLM content analysis)tam-builder| Priority | Signal | Level | Source | Cost |
|---|---|---|---|---|
| P0 | Headcount growth (>10% in 90d) | Company | Data diffs | Free |
| P0 | Tech stack changes | Company | Data diffs | Free |
| P0 | Funding round | Company | Data diffs | Free |
| P0 | Job posting for relevant roles | Company | Apify linkedin-job-search | ~$0.001/job |
| P1 | Leadership job change | Person | Apify linkedin-profile-scraper | ~$3/1k |
| P1 | LinkedIn content analysis | Person | Apify linkedin-profile-posts + LLM | ~$2/1k + LLM |
| P1 | LinkedIn profile updates | Person | Apify linkedin-profile-scraper | ~$3/1k |
| P2 | New C-suite hire | Company | Derived from person scans | Free |
See configs/example.json for full schema. Key sections:
client_name — which client's TAM to scansignals.* — enable/disable each signal type with thresholdsscan_scope — filter by tier, status, lead_statusCRITICAL: Never write signals or update lead statuses without explicit user approval.
The signal scanner writes to multiple tables: signals (insert), enrichment_log (insert), companies (patch snapshots), and people (patch lead_status). These writes affect downstream outreach decisions — bad signals lead to bad outreach timing.
Required flow:
--dry-runWhy this matters:
lead_status changes from monitoring to signal_detected are hard to undo across many recordsThe agent must NEVER pass `--yes` on a first run. The --yes flag is only for pre-approved scheduled scans where the user has already validated the signal detection logic.
# Dry run first (ALWAYS DO THIS) — detect signals without writing to DB
python skills/capabilities/signal-scanner/scripts/signal_scanner.py \
--config skills/capabilities/signal-scanner/configs/my-client.json --dry-run
# Full scan (only after user reviews dry-run results and approves)
python skills/capabilities/signal-scanner/scripts/signal_scanner.py \
--config skills/capabilities/signal-scanner/configs/my-client.json
# Test mode (5 companies max)
python skills/capabilities/signal-scanner/scripts/signal_scanner.py \
--config configs/example.json --test --dry-run
# Free signals only (skip Apify)
# Set all Apify signals to enabled: false in config| Flag | Effect |
|---|---|
--config PATH | Path to config JSON (required) |
--test | Limit to 5 companies, 3 people |
--yes | Auto-confirm Apify cost prompts. Only use for pre-approved scheduled scans. |
--dry-run | Detect signals but don't write to DB. Always run this first. |
--max-runs N | Override Apify run limit (default 50) |
Each signal includes: client_name, company_id, person_id, signal_level (company or person), signal_type, signal_source, strength, signal_data (JSON), activation_score, detected_at, acted_on, run_id.
lead_status updated to signal_detected when activation_score >= thresholdmetadata._signal_snapshot updated for next diff cycleraw_data._signal_snapshot updated for next diff cycleenrichment_log entries with tool='apify', action='search' or 'enrich', plus credits_usedactivation_score = strength * recency_multiplier * account_fit
Recency: <24h = 1.5, 1-3d = 1.2, 3-7d = 1.0, 1-2w = 0.8, 2-4w = 0.5
Account: Tier 1 = 1.3, Tier 2 = 1.0, Tier 3 = 0.7tam-builder (provides companies + people)cold-email-outreach (acts on signals)signal-scanner/
├── SKILL.md
├── configs/
│ └── example.json
└── scripts/
└── signal_scanner.py~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.