import-sop — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited import-sop (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Import and structure agency Standard Operating Procedures (SOPs) that apply across all clients. SOPs define how work gets done — approval workflows, content review steps, campaign launch checklists, escalation procedures, and quality gates.
SOPs are stored at the agency level (~/.claude-marketing/sops/), not per-brand, so they apply consistently across all clients.
The user provides:
If the user doesn't provide a name, infer it from the content.
~/.claude-marketing/brands/_active-brand.json for the active slug, then load ~/.claude-marketing/brands/{slug}/profile.json. Apply brand voice, compliance rules for target markets (skills/context-engine/compliance-rules.md), and industry context. Also check for existing guidelines at ~/.claude-marketing/brands/{slug}/guidelines/_manifest.json — if present, load restrictions and relevant category files. Check for custom templates at ~/.claude-marketing/brands/{slug}/templates/. Check for agency SOPs at ~/.claude-marketing/sops/. If no brand exists, ask: "Set up a brand first (/digital-marketing-pro:brand-setup)?" — or proceed with defaults.guidelines-manager.py --action save-sop --name {name} --content "{content}"~/.claude-marketing/sops/{name}.mdUser: "Before publishing any content, it needs to go through: 1. Writer creates draft, 2. Editor reviews for quality, 3. Brand manager checks voice alignment, 4. Legal reviews if it contains claims, 5. Client approves, 6. Publish"
Result: Saves to ~/.claude-marketing/sops/content-approval.md:
# Content Approval Workflow
## Scope
Applies to all content before publishing across all brands/clients.
## Steps
1. **Writer creates draft**
- Role: Content Creator
- Plugin support: Content Engine generates draft with brand voice applied
- Output: Draft content document
2. **Editor reviews for quality**
- Role: Editor
- Checklist: Grammar, clarity, structure, readability score
- Plugin support: Content scorer provides readability metrics
- Gate: Human approval required
3. **Brand manager checks voice alignment**
- Role: Brand Manager
- Checklist: Voice consistency, messaging alignment, restriction compliance
- Plugin support: Brand voice scorer provides alignment score
- Gate: Human approval required
4. **Legal reviews (conditional)**
- Trigger: Content contains health claims, financial claims, testimonials, or competitor comparisons
- Role: Legal Team
- Gate: Human approval required
5. **Client approves**
- Role: Client Stakeholder
- Gate: Human approval required
6. **Publish**
- Role: Content Creator / Social Media Manager
- Plugin support: Platform formatting applied automaticallyUser: "Our agency has a crisis escalation process: minor issues go to account manager, major issues go to agency director, critical issues go to CEO within 1 hour"
Result: Saves to ~/.claude-marketing/sops/crisis-escalation.md:
# Crisis Escalation Procedure
## Severity Levels
### Minor (Severity: Low)
- **Examples**: Negative review, minor social media complaint, factual error in published content
- **Escalate to**: Account Manager
- **Response SLA**: 4 hours
- **Action**: Acknowledge, draft response, resolve
### Major (Severity: Medium)
- **Examples**: Viral negative post, media inquiry, product recall mention, multiple complaints
- **Escalate to**: Agency Director
- **Response SLA**: 1 hour
- **Action**: Pause scheduled content, draft holding statement, convene response team
### Critical (Severity: High)
- **Examples**: Legal threat, data breach, executive controversy, widespread media coverage
- **Escalate to**: CEO
- **Response SLA**: 1 hour
- **Action**: All content paused, crisis team activated, holding statement within 30 minutesskills/context-engine/guidelines-framework.md — How SOPs integrate with the guideline systemscripts/guidelines-manager.py — CLI for SOP CRUD operations (--action list-sops, save-sop, get-sop)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.