traceability-manager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited traceability-manager (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user needs to:
Do NOT use this skill for static spreadsheet management, project management tooling configuration, or business context documentation. It produces executable traceability artifacts and is designed for both human review and agent-driven workflows.
Traceability flows in two directions:
Bidirectional traceability enables both coverage analysis (all requirements are implemented) and impact analysis (a change to any artifact can be traced back to its origin).
Use this controlled set of link types:
| Link Type | Direction | Meaning |
|---|---|---|
originates-from | artifact → source | This artifact is derived from the named source artifact |
refines | lower-level → higher-level | This requirement or task implements or clarifies the parent |
implements | task → requirement | This task delivers the specified requirement |
validated-by | requirement → test | This requirement is verified by the named test or validation |
depends-on | any → any | This artifact requires the named artifact to be complete first |
affects | any → any | A change to this artifact will impact the named artifact |
governed-by | any → policy | This artifact must comply with the named policy or standard |
Every requirement must have at least one forward path to a validation artifact. The coverage model distinguishes:
| Coverage Level | Required Links |
|---|---|
uncovered | No forward path to any validation artifact |
partially-covered | Forward path exists but not all acceptance criteria are validated |
fully-covered | Full forward path from requirement to acceptance criteria to validation |
Orphan types this skill detects:
| Orphan Type | Definition |
|---|---|
orphan-requirement | Requirement with no forward links to tasks or validation |
orphan-task | Task with no backward link to a parent requirement or spec |
orphan-api | API endpoint or contract not linked to a source requirement or spec |
orphan-validation | Test or validation artifact not linked to a traced requirement |
orphan-policy | Artifact with no governed-by link to a policy or standard |
*.md, *.spec.md, *.prd, *.prp, *.api.md).governed-by relationships by checking for embedded policy references.fully-covered, partially-covered, or uncovered.Generate the traceability model as a Markdown document using the required output structure.
| Situation | Action |
|---|---|
| Requirement has no forward link | Flag as orphan-requirement; do not implement until parent is identified |
| Task has no backward link | Flag as orphan-task; ask for parent requirement or mark as infrastructure |
| API has no source requirement | Flag as orphan-api; require a refines link to a requirement or spec before implementation |
| Validation has no backward link | Flag as orphan-validation; require a validated-by link to a requirement |
| Artifact has no policy link | Flag as orphan-policy; suggest a governed-by link to an applicable standard |
| Change to a requirement | Trace forward and backward; present full impact set before proceeding |
Multiple artifacts share a depends-on | Consolidate the dependency chain; identify single source of truth |
| Conflicting links detected | Surface the conflict; do not resolve silently; present both paths for human decision |
# Traceability Model
## 1. Overview
- Total artifacts:
- Requirements:
- Tasks:
- APIs:
- Validation artifacts:
- Policies:
## 2. Artifact Inventory
| ID | Type | Title | File | Links Out | Links In | Coverage |
| --- | --- | --- | --- | --- | --- | --- |
## 3. Relationship Graph
| From | Link Type | To | Rationale |
| --- | --- | --- | --- |
## 4. Typed Link Definitions
| Link Type | From | To | Cardinality | Coverage Rule |
| --- | --- | --- | --- | --- |
## 5. Coverage Report
### Fully Covered
| Requirement | Forward Path | Validation |
| --- | --- | --- |
### Partially Covered
| Requirement | Missing Link | Recommendation |
| --- | --- | --- |
### Uncovered (Orphans)
| Requirement | Gap | Recommended Action |
| --- | --- | --- |
## 6. Orphan Report
| Orphan Type | ID | Title | File | Recommended Action |
| --- | --- | --- | --- | --- |
## 7. Change Impact Analysis (when triggered)
### Changed Artifact
- ID:
- Type:
- File:
### Forward Impact (downstream)
| Artifact | Distance | Change Scope |
| --- | --- | --- |
### Backward Impact (upstream justification)
| Artifact | Distance | Rationale |
| --- | --- | --- |
## 8. Governance
- Link integrity rules:
- Minimum coverage standard:
- Policy compliance requirements:
## 9. Recommendations
- Immediate:
- Short-term:
- Long-term:When the user requests a traceability plan (vs. a snapshot model), use this structure:
# Traceability Plan
## 1. Objectives
- What the traceability model must enable
## 2. Scope
- Artifacts included
- Artifacts excluded
- Boundaries
## 3. Typed Link Architecture
- Defined link types
- Directionality rules
- Cardinality constraints
## 4. Coverage Expectations
- Minimum coverage level per artifact type
- Coverage gap threshold for blocking
## 5. Governance Rules
- Who approves link additions
- Orphan resolution SLAs
- Change impact review triggers
## 6. Workflow Integration
- When to update traceability links
- Who is responsible for each artifact type
- Review cadence
## 7. Reporting
- Coverage reports: frequency and audience
- Orphan reports: frequency and owner
- Impact analysis triggers and audience
## 8. Maintenance
- Link hygiene rules
- Orphan detection schedule
- Coverage recalculation triggersBefore presenting the traceability model or plan, verify:
TBD rather than invented.references/link-vocabulary.md — full typed link definitions with usage examples (load only when the skill body instructs it)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.