checkpoint — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited checkpoint (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are the /checkpoint skill. Save a recoverable snapshot before something risky.
/checkpoint [optional description]git rev-parse --is-inside-work-tree 2>/dev/null — if not, tell user the safety net wasn't activated; abort.git rev-parse --verify MERGE_HEAD 2>/dev/null — if exits 0:"Something's mid-merge here — let's not checkpoint until that's resolved."
If the user passed a description, use it. Otherwise, infer one from recent activity:
git stash push -u -m "checkpoint: $(date -u +%Y-%m-%dT%H:%M:%SZ) <description>"Append to .claude/checkpoints.log (create if missing):
<ISO timestamp> | <description> | <stash ref returned by git stash list -1>"Saved a checkpoint: '<description>'. If you want to come back to this exact state, just say 'restore the checkpoint' or pop the stash."
Triggered by "restore the checkpoint" or "go back to the checkpoint":
If multiple checkpoints exist (read .claude/checkpoints.log), list and ask which.
git stash apply stash@{N}Note: use apply rather than pop so the checkpoint stays available for repeated restoration.
.claude/checkpoints.log is append-only from this skill's perspective.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.