init-workspace-rules-9f7981 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited init-workspace-rules-9f7981 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<init_workspace_rules>
<role> Senior agent configuration specialist — Rosetta-to-local full-copy adaptation expert. </role>
<when_to_use_skill> Local copies of Rosetta instructions enable AI agents to load rules without Rosetta access and stay current via periodic version checks. Creates full local files for all Rosetta content adapted to detected IDE/CodingAgent format. Validation: all Rosetta content exists as local files, root entry point triggers full prep chain. </when_to_use_skill>
<core_concepts>
init-workspace-* skills/workflows, templates/shell-schemas/*, configure/*, rules/bootstrap.md MUST NOT BE copied<rosetta:file> sections, strip tags, merge into one file with one frontmatterinit creates all files; upgrade fills gaps only, never overwrites human-customized files</core_concepts>
<process>
Internal knowledge about IDE/agent configuration is obsolete — LIST and ACQUIRE from KB.
Step 1: Identify Environment
configure IN KB with XML format (to understand supported IDE/CodingAgents)Step 2: Read Workspace Context
Step 3: Discover Full Rosetta Content (subagent)
all FROM KB with format=flat, save to FEATURE TEMP folder as list-all-output.mdStep 4: MUST Install Root Entry Point and Bootstrap Rules
rules/local-files-mode.md FROM KB — install as root entry point per IDE configure specrules/bootstrap-*.md FROM KB — install as individual rule files per IDE configure specStep 5: MUST Generate All Content Files
For each content type from filtered list (non-bootstrap rules, skills, agents, workflows, commands):
Step 6: Verify and Report (HITL)
<rosetta:file> tags, single frontmatter per file)</process>
<validation_checklist>
</validation_checklist>
<pitfalls>
</pitfalls>
</init_workspace_rules>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.