orchestrator-contract-de6e28 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited orchestrator-contract-de6e28 (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<orchestrator_contract>
<prerequisites>
load-context</prerequisites>
<process>
Topology:
Dispatch:
""" You are [role]. [Lightweight|Full] subagent. Plan: [abs path to plan.json | "ad-hoc"]. Phase: [id]. [Step: [id].]
Root: [path] [git worktree?] DO: [in scope + explicit expected outputs] DO NOT: [out of scope / read-only / untouchable — no improvising beyond scope]
MUST USE SKILL subagent-contract, operation-manager[, required skill]. RECOMMEND USE SKILL [recommended skill].
[verbatim — carry through every step]
[full context + refs; subagent knows only bootstrap + prep + this prompt → give all it needs]
Message: [define content + format — consistent, unambiguous, complete, so you can verify it] Files: [optional; high volume → unique path per subagent + format/template] MUST return: results, summary, side effects, anomalies, discoveries, contract changes, deviations, inconsistencies, insights.
[claims/findings/recommendations → proofs: deep links w/ line ranges + brief quotes; facts ≠ assumptions]
[free-form: anything else not covered] """
Routing:
Quality:
</process>
</orchestrator_contract>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.