firepass-trio — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited firepass-trio (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Autonomous end-to-end agent powered by Kimi K2.6 Turbo. Chains researcher → worker → reviewer in a single MCP call. If the reviewer finds issues and marks them NEEDS-FIXES, the trio loops back: the worker re-runs with reviewer feedback appended to context, then the reviewer re-runs. The loop is bounded by max_review_rounds.
Use INSTEAD OF chaining the three single-role tools manually.
Call mcp__firepass__firepass_trio with:
prompt: Clear description of the coding taskcwd: Important — set to the project root so the agent can find filescontext: Optional pre-loaded file contents, error messages, or specsmax_iterations: Tool-call rounds per sub-agent (default 60, capped at 200)max_review_rounds: Fix loop rounds between worker and reviewer (default 2, capped at 5)<firepass_trio status="..." rounds="N">
<research>...</research>
<rounds>
<round n="1">
<implementation>...</implementation>
<review>...</review>
</round>
...
</rounds>
</firepass_trio>approved: Review passed with no blocking issues, or all issues were fixed within the review roundsneeds_fixes: Reviewer marked NEEDS-FIXES but max review rounds were exhaustedresearch_failed: The researcher step did not complete successfullyimplementation_failed: The worker step did not complete successfullyreview_failed: The reviewer step did not complete successfullyResearcher and reviewer are read-only; worker has full access including bash. All I/O is sandboxed to the provided cwd. See the per-role tool lists in skills/firepass-researcher/SKILL.md, skills/firepass-worker/SKILL.md, and skills/firepass-reviewer/SKILL.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.