agent-discussion — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-discussion (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When multiple specialist agents contribute opinions, findings, or recommendations, raw text output becomes unreadable. This skill defines a structured terminal format that makes agent debates scannable, severity-aware, and action-oriented.
Core principle: Every agent contribution must be visually distinct, severity-tagged, and traceable to evidence.
Iron Law:
NEVER MIX AGENT OUTPUTS INTO UNSTRUCTURED PROSE — ALWAYS USE THE BOX FORMATUse this ESPECIALLY when:
Each agent's finding is rendered in a box with metadata:
┌─ {emoji} {agent-name} ─────────────────────────┐
│ {SEVERITY} [{LEVEL}]: {title} │
│ {description spanning multiple lines with │
│ proper indentation and wrapping} │
│ │
│ Evidence: {file:line — code or observation} │
│ Recommendation: {actionable next step} │
└──────────────────────────────────────────────────┘Each agent type has a fixed emoji prefix for visual scanning:
| Agent | Emoji | Color Hint |
|---|---|---|
| security-specialist | 🔒 | Red |
| accessibility-specialist | ♿ | Blue |
| performance-specialist | ⚡ | Yellow |
| code-quality-specialist | 📏 | Green |
| architecture-specialist | 🏛️ | Purple |
| test-strategy-specialist | 🧪 | Cyan |
| event-architecture-specialist | 📨 | Orange |
| integration-specialist | 🔗 | Teal |
| observability-specialist | 📊 | Gray |
| migration-specialist | 🔄 | Magenta |
| seo-specialist | 🔍 | Lime |
| ui-ux-design-specialist | 🎨 | Pink |
| documentation-specialist | 📝 | White |
| code-reviewer | 👀 | Indigo |
Severity levels with visual indicators:
| Level | Badge | Meaning |
|---|---|---|
| CRITICAL | 🔴 CRITICAL | Must fix before merge — security vulnerability, data loss risk |
| HIGH | 🟠 HIGH | Should fix before merge — significant quality or correctness issue |
| MEDIUM | 🟡 MEDIUM | Should fix soon — maintainability, performance, or minor risk |
| LOW | 🟢 LOW | Nice to have — style, optimization, minor improvement |
| INFO | ℹ️ INFO | Observation — no action required, context for the team |
┌─ 🔒 security-specialist ──────────────────────────┐
│ 🟠 HIGH: SQL injection risk in user input handling │
│ │
│ Raw string concatenation used to build SQL query │
│ without parameterization. User-controlled input │
│ flows directly into the query string. │
│ │
│ Evidence: api/users.ts:42 │
│ const q = `SELECT * FROM users WHERE id=${input}` │
│ Recommendation: Use parameterized queries │
│ const q = `SELECT * FROM users WHERE id=$1` │
└─────────────────────────────────────────────────────┘┌─ 🔒 security-specialist ──────────────────────────┐
│ 🔴 CRITICAL: Unauthenticated endpoint exposed │
│ │
│ The /api/admin/users endpoint has no auth guard. │
│ Any client can list all user records including PII. │
│ │
│ Evidence: api/admin/users.ts:12 — no @UseGuards() │
│ Recommendation: Add AuthGuard and RolesGuard │
└─────────────────────────────────────────────────────┘
┌─ 📏 code-quality-specialist ───────────────────────┐
│ 🟡 MEDIUM: Missing input validation │
│ │
│ Query parameters parsed without validation. │
│ Unexpected types could cause runtime errors. │
│ │
│ Evidence: api/admin/users.ts:18 — raw req.query │
│ Recommendation: Add Zod/class-validator schema │
└─────────────────────────────────────────────────────┘When agents agree, show a consensus block:
╔══════════════════════════════════════════════════════╗
║ ✅ CONSENSUS (3/3 agents agree) ║
║ ║
║ Auth guard must be added to /api/admin/* endpoints. ║
║ Agents: 🔒 security, 📏 code-quality, 🏛️ architecture ║
╠══════════════════════════════════════════════════════╣
║ Priority: CRITICAL — unanimously recommended ║
╚══════════════════════════════════════════════════════╝When agents disagree, show the split:
╔══════════════════════════════════════════════════════╗
║ ⚖️ SPLIT OPINION (2 vs 1) ║
║ ║
║ Topic: Should we add request-level caching? ║
║ ║
║ FOR (2): ║
║ ⚡ performance — reduces DB load by ~40% ║
║ 🏛️ architecture — fits existing cache layer ║
║ ║
║ AGAINST (1): ║
║ 🔒 security — cache invalidation risks stale ║
║ auth state for permission changes ║
║ ║
║ Recommendation: Proceed with cache, add TTL < 60s ║
╚══════════════════════════════════════════════════════╝At the end of a multi-agent discussion, render a summary:
┏━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┓
┃ 📋 DISCUSSION SUMMARY ┃
┣━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┫
┃ Agents: 4 participated ┃
┃ Findings: 7 total ┃
┃ 🔴 CRITICAL: 1 ┃
┃ 🟠 HIGH: 2 ┃
┃ 🟡 MEDIUM: 3 ┃
┃ 🟢 LOW: 1 ┃
┃ Consensus: 2 items agreed ┃
┃ Disputes: 1 split opinion ┃
┃ ┃
┃ Action required: Fix 1 CRITICAL + 2 HIGH before ┃
┃ merge. Review 1 split opinion with team. ┃
┗━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━┛file:line reference when available~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.