thumbgate-guard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited thumbgate-guard (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Escalate the agent's most recent mistake into an enforced ThumbGate prevention rule — a PreToolUse block gate that intercepts the same bad tool-call shape before it runs again, in this session and every future one (Claude Code, Cursor, Codex, Gemini, Amp, Cline).
This skill wraps existing ThumbGate capability and adds no new logic — it routes to the real capture_feedback + force-promote path.
sentence (e.g. git push --force origin main, DROP TABLE users, deploy without tests).
capture_feedback MCP tool: signal: "down", context,whatWentWrong, whatToChange, tags. If the user only gave a vague signal, pass the recent turns as conversationWindow / chatHistory for history-aware distillation instead of refusing.
npx thumbgate force-gate "<one-sentence context of the mistake>"This prints the new gateId and the active gate count.
block — not just a logged note.
Full capture_feedback field contract, force-gate flags, and the guided first-rule walkthrough (npx thumbgate quickstart) are in references/capture-and-promote.md.
Input: "the agent force-pushed to main and overwrote a teammate's commit — never again"
Action:
capture_feedback → signal: down, context: "agent force-pushed to main, overwrote a teammate's commit", whatWentWrong: "destructive force-push to a shared branch", whatToChange: "block force-push to main", tags: "git,force-push".npx thumbgate force-gate "force-push to main overwrote a teammate's commit".gateId + "force-push to main is now blocked as a PreToolUse check."whatWentWrong + whatToChange, or pass conversationWindowso it can distill from history.
hooks are installed (thumbgate-doctor).
capture_feedback (signal: down) including whatWentWrong + whatToChange.npx thumbgate force-gate and reported the real gateId.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.