workflow-router — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited workflow-router (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Classify the user's request into exactly one workflow owner before substantive work starts.
This skill owns intent recognition and handoff only. It does not implement, test, review, deliver work, or replace the selected owner.
| State | Owner |
|---|---|
| question | answer-workflow |
| sdd-change | sdd-workflow |
| diagnosis | diagnosis-workflow |
| review | review-workflow |
| delivery | delivery-workflow |
| harness-hub-maintenance | hub-maintenance-workflow |
scripts/workflow-check.mjs --prompt "<user request>" --json before substantive work when a terminal is available.scripts/route-intent.mjs --prompt "<user request>" --json when only classification is needed.scripts/skill-activation-check.mjs --prompt "<user request>" --json for one helper skill trigger audit, or scripts/skill-activation-check.mjs --cases-file "<cases.json>" --json for a prompt matrix, positive and boundary helper coverage report, and excluded owner summary from installed SKILL.md metadata.scripts/owner-contract-check.mjs --state "<state>" --json only when auditing whether the installed owner SKILL.md still contains required sections, ordered gates, and boundary phrases.scripts/helper-contract-check.mjs --json only when auditing whether high-risk helper skills still carry explicit side-effect boundaries.references/intent-taxonomy.md when the state is still not obvious.references/state-handoff.md to hand off:effective-interact is requiredreferences/orchestration-policy.md.effective-interact is a reporting layer, not a workflow owner.doc-coauthoring, internal-comms, claude-api, mcp-builder, skill-creator, design-taste-frontend, theme-factory, and slack-gif-creator are helper skills. Include them in the handoff only when they match the selected owner's task.references/orchestration-policy.md; the router never dispatches them.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.