invalid-sidecar — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited invalid-sidecar (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This fixture is intentionally invalid at the SIDECAR layer: the SKILL.md frontmatter is valid, but audit-state.json omits the required owner field. The structural lint gate validates the sidecar against its schema and MUST reject this.
What it is: A deliberately broken capability skill used only by the conformance runner. Mental model: Keep the frontmatter valid but break the sibling audit-state.json so the sidecar-schema branch of the structural gate is the thing under test. Why it exists: To guard the sidecar-validation path — a regression that stopped validating audit-state.json against its schema would otherwise pass the suite. What it is NOT: It is not a production skill and never routes outside the test runner. Adjacent concepts: the other negative fixtures under this directory; the audit-state.json sidecar (ADR-0019); the skill-audit-state schema. One-line analogy: It is a form with the body filled in but a required field on the attached cover sheet left blank. Common misconception: That sidecar validity is the Behavior Gate's concern — it is structural (the Integrity Gate validates the sidecar shape before any eval runs).
Valid frontmatter, invalid sidecar (missing required owner) → structural lint failure.
One broken layer per fixture keeps the failing assertion unambiguous.
Exercised by the gate-conformance runner; expected to fail structural lint with a sidecar required-field error.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.