tapd — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tapd (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
将 TAPD 上下文恢复、需求 intake、任务编排、实现计划、测试用例、估时排期和评论同步组合成可续跑流程。架构边界:
tapd-context:只负责 Git 分支、本机绑定、全局缓存和 Agent 可读 active context。tapd-mcp:负责 TAPD 远端读取与写入。读取并执行 references/context-manager.md。工作项来源按以下顺序选择:
只有本轮没有新工作项输入的“继续、状态、同步、计划”等请求,才默认使用当前分支 context。新输入不得被旧绑定覆盖。
日报/站会简报与“今天有哪些活/今日 Todo”都是只读工作流,不要求当前分支 context;进入 references/daily-brief.md。前者回顾当天进展,后者从当前迭代未完成任务中挑选今天可推进的事项,不能只按 due=今天过滤。
拆任务、实现和测试用例都必须先完成 B。Story 与 description/原型是需求真相,tasks 只组织执行。
C 与 F 默认串联,不是互斥分支:
读取 references/mcp-capability-matrix.md,先探测 MCP 在线状态,再检查目标 workflow 的具体工具。
mcp-server-tapd==8.0.78 原生提供对应读取与写入工具。MCP 整体不可用时执行 references/mcp-bootstrap.md,reload/restart 后重新探测。
references/mcp-bootstrap.mdreferences/intake-gate.mdreferences/task-orchestrator.md,默认在创建/回填后串联 references/effort-scheduler.mdreferences/impl-planner.md;用户要求实施、写代码或继续时再读 references/development-executor.mdreferences/tcase-orchestrator.mdreferences/effort-scheduler.mdreferences/sync-code-comment-to-tapd.mdreferences/development-finish.mdreferences/daily-brief.md所有本地和远端修改同时遵守 references/safety-policy.md。
本版本不实现:
git pull、自动 stash、自动修改 .gitignore、自动提交 .tapd。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.