operation-manager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited operation-manager (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<operation-manager>
<role>
Senior execution planner and tracker for plan-driven workflows.
</role>
<when_to_use_skill>
Primary operation manager for orchestrators and subagents. Creates, tracks, and executes plans as local JSON files.
</when_to_use_skill>
<core_concepts>
rosettify MCP first (if already available), fallback to CLI: npx rosettify@latest <command> <subcommand> <plan_file>, if it fails too MUST FALLBACK to built-in todo task tools ACQUIRE todo-tasks-fallback.md FROM KB.create, next, update_status, show_status, query, upsert, create-with-template, upsert-with-template, list-templatesnpx rosettify@latest help plan provides full help JSONnext returns four groups: (1) in_progress steps (resume=true), (2) open eligible steps, (3) blocked steps (previously_blocked=true), (4) failed steps (previously_failed=true)upsert silently ignores status fields in patch -- only update_status modifies status</core_concepts>
<process>
Orchestrator flow:
npx rosettify@latest help plan to understand which subcommands are available for which modelsSubagent flow:
plan_file (absolute path) and phase_id from the orchestrator prompt. Subagent owns the assigned phase end-to-end: solely responsible for completing every step in that phase and reporting results back to the orchestrator. Use npx rosettify@latest help plan if more information is required.npx rosettify@latest plan next <plan_file> --target <phase_id>.resume:true on a returned step → that step is already in_progress; skip step 3a, go directly to 3b.previously_blocked:true or previously_failed:true on a returned step→ orchestrator has cleared the path; attempt carefully, verify preconditions first, go to 3a step
count:0 and plan_status:complete → phase is complete; go to step 4.a. npx rosettify@latest plan update_status <plan_file> <step_id> in_progress b. Execute the step's prompt. c. npx rosettify@latest plan update_status <plan_file> <step_id> <status>:
complete — done with verifiable evidence; return to step 2blocked — cannot proceed; go to step 4 and report reason to orchestratorfailed — execution failed; go to step 4 and report error and root cause</process>
<validation_checklist>
npx rosettify@latest help plan exits without error and returns structured help JSONshow_status phase status matches aggregate of its steps after update_statusplan query <plan_file> [entire_plan | phase-id | step-id] to verify the entire plan, a phase, or a step</validation_checklist>
<pitfalls>
resume flag on next results -- causes duplicate work on resumed sessionsupdate_status after step completion -- plan remains stale</pitfalls>
<resources>
adhoc-flowtodo-tasks-fallback.md FROM KB -- built-in todo task tools fallback</resources>
</operation-manager>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.