thumbgate-doctor — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited thumbgate-doctor (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Audit whether ThumbGate is actually wired into this agent — PreToolUse / SessionStart hooks installed, MCP server reachable, lesson store present, statusline, overall agent-readiness — then tell the user exactly what to fix.
This skill wraps existing ThumbGate capability and adds no new logic — it runs the existing doctor + integrity checks.
npx thumbgate doctor(Add --json for a machine-readable report.) It exits non-zero when the project is not ready.
check_operational_integrity MCP tool — this confirms theserver-side enforcement path is live, not just the local config.
its exact fix command (usually npx thumbgate init).
lead with the single highest-impact fix.
The full readiness checklist (each check, what a failure means, and its fix) is in references/wiring-checklist.md.
Input: "why aren't my gates firing? is ThumbGate even wired up?"
Action: run npx thumbgate doctor, then check_operational_integrity, then:
❌ PreToolUse hook not installed — run npx thumbgate init. ✅ MCP server reachable. ✅ Lesson store present. Fix the hook and your promoted rules will start blocking.the printed fix (usually npx thumbgate init).
skill — or no gated action has been attempted yet — check the thumbgate-blocked skill.
MCP server isn't running — restart it (npx thumbgate serve).
npx thumbgate doctor and reported its actual readiness status, not a guess.check_operational_integrity, not just local config.npx thumbgate init).~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.