use-company — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited use-company (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
明確設定目前對話要使用哪個 company context,避免在多公司 workspace 中反覆 auto-detect, 或因 routing 歧義導致用錯設定。
Shared authority: bash scripts/resolve-company-context.sh
If the user provides a company name:
bash scripts/resolve-company-context.sh --company "<name>" --format jsonstatus=ok → proceed with resolved payloadstatus=error → 直接呈現 resolver 的 fail-stop diagnostics;skill 內不得自己重寫 YAML matchingIf no company name provided:
bash scripts/resolve-company-context.sh --format jsonstatus=ok → proceed with resolved payloaderror_code=default_company_unset → 列出已註冊公司,請使用者選擇base_dir、config_path、github.org、jira.projects 的單一 authoritystatus=error,就停止並直接回報該錯誤warnings[] 才能用 warning 呈現;不得把 resolver failure 降格成 advisory prose以簡短摘要回報:
✓ Active company: {company_name}
Base dir: {base_dir}
GitHub org: {github_org}
JIRA projects: {project_keys}
Slack: {configured channels or "not configured"}要明確告知:「在這段對話剩餘流程中,所有工作都應透過 {company_name} context routing。 套用 .claude/rules/{company_name}/ 的 L2 rules,並從 {base_dir}/workspace-config.yaml 解析 config。」
當使用者提供 JIRA ticket key 或 project prefix,而且目的是查 routing、不是設定 context 時, 就顯示 routing resolution:
🔍 Routing Diagnostic
Ticket: PROJ-123
Company: acme
Base dir: {base_dir}
Config: {base_dir}/workspace-config.yaml
Resolved via: jira.projects[].key match ("PROJ")若找不到 match,列出所有已註冊公司與其 JIRA project keys。
若存在潛在問題,也要明確標出:例如 config file 缺失、jira.projects 未定義、或多間公司宣告相同 project prefix。
Diagnostic mode must also consume the shared resolver:
bash scripts/resolve-company-context.sh --ticket PROJ-123 --format jsonbash scripts/resolve-company-context.sh --project PROJ --format jsonskill 可以為了可讀性重排 resolver 結果,但不得自創另一個 routing verdict。
Non-optional. Execute before reporting task completion.
Run the checklist in post-task-reflection-checkpoint.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.