shaktra-status-dash — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited shaktra-status-dash (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When this skill is invoked, immediately execute all sections below in order and present the results as a formatted dashboard. Do not ask clarifying questions — just run the checks and display the output.
Read-only — never create, modify, or delete any file. Use ${CLAUDE_PLUGIN_ROOT} to locate the installed plugin directory.
Run the version check script via Bash:
python3 ${CLAUDE_PLUGIN_ROOT}/scripts/check_version.py ${CLAUDE_PLUGIN_ROOT}The script outputs a JSON object. Parse the status field and display accordingly:
status value | Display |
|---|---|
up_to_date | Version: {local_version} + Up to date (v{local_version}) |
update_available | Version: {local_version} + Update available: {local_version} → {remote_version} + Run: /plugin install {repository} |
ahead | Version: {local_version} + Local version ({local_version}) is ahead of remote ({remote_version}) |
offline | Version: {local_version} + Could not check for updates (offline or rate-limited) |
no_repository | Version: {local_version} + No repository configured — version check unavailable |
If the JSON contains "error", display: "Plugin not configured — plugin.json not found."
.shaktra/sprints.yml.status is active (or the most recent sprint).velocity_history exists, show the last 3 entries as a trend line (e.g., Velocity trend: 18 → 21 → 24)./shaktra:tpm to plan one.".shaktra/stories/*/handoff.yml — read each file.story_id and current_phase from each handoff.pending → plan → tests → code → quality → complete → failed.| Phase | Count | Stories |
|----------|-------|------------------|
| pending | 2 | ST-004, ST-005 |
| plan | 1 | ST-003 |
| code | 1 | ST-002 |
| complete | 1 | ST-001 |blocked: true or blocker field set, append "(blocked)" after its ID./shaktra:tpm to create stories.".shaktra/stories/*/handoff.yml files.quality_findings (a list of findings with severity and resolved fields).resolved is false or absent) grouped by severity: P0, P1, P2, P3..shaktra/settings.yml → quality.p1_threshold for the P1 limit.p1_threshold| Severity | Unresolved |
|----------|------------|
| P0 | 0 |
| P1 | 1 |
| P2 | 3 |
| P3 | 2 |
Merge status: Clear (P1: 1/2 threshold).shaktra/memory/principles.yml → count entries by confidence band. If file is missing or empty, count is 0.confidence >= 0.7confidence >= 0.4 and < 0.7confidence >= 0.2 and < 0.4.shaktra/memory/anti-patterns.yml → count active entries. If missing or empty, count is 0..shaktra/memory/procedures.yml → count active entries. If missing or empty, count is 0..shaktra/settings.yml → memory.max_principles, memory.max_anti_patterns, memory.max_procedures for limits.Principles: {total_count} ({high}↑ {moderate}~ {low}↓)Anti-patterns: {count}Procedures: {count}.shaktra/analysis/manifest.yml exists. If not, skip this section entirely.status.| Dimension | Name | Status |
|-----------|-----------------|-----------|
| D1 | Architecture | complete |
| D2 | Practices | complete |
| D3 | Dependencies | pending |
| ... | ... | ... |Completed: {n}/9 dimensionsEach section degrades independently:
/shaktra:init to set up."Present the dashboard as a structured report:
## Shaktra Dashboard
### Plugin Info
Version: 0.1.0
Status: Up to date (v0.1.0)
### Sprint Health
Sprint: S-003 — "Auth module"
Dates: 2025-01-06 → 2025-01-20 (5 days remaining)
Capacity: 21/30 points committed
Velocity trend: 18 → 21 → 24
### Story Pipeline
| Phase | Count | Stories |
|----------|-------|----------------|
| code | 1 | ST-002 |
| complete | 2 | ST-001, ST-003 |
### Quality Summary
| Severity | Unresolved |
|----------|------------|
| P0 | 0 |
| P1 | 1 |
| P2 | 3 |
| P3 | 2 |
Merge status: Clear (P1: 1/2 threshold)
### Memory Health
Principles: 12 (8↑ 3~ 1↓)
Anti-patterns: 2
Procedures: 1
### Analysis Progress
Not applicable — no analysis manifest found.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.