doc-testing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited doc-testing (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Each repository interface has a companion test package:
/domain/repositories/<name>/<name>.go - Interface definition
/domain/repositories/<name>/<name>test/
contract.go - Mock<Name> + <Name>ContractTestingtype Mock<Name> struct {
<Method>Func func(...) ...
}
func (m *Mock<Name>) <Method>(...) ... {
if m.<Method>Func == nil {
panic("called not defined <Method>Func")
}
return m.<Method>Func(...)
}func <Name>ContractTesting(t *testing.T, repo <Name>) {
ctx := context.Background()
t.Run("Contract: <behavior>", func(t *testing.T) {
// Test implementation
require.NoError(t, err)
assert.ErrorIs(t, err, domain.ErrExpected)
})
}testcontainers-go with postgres:17 for all PostgreSQL testsTestMain, never per test functionnewTestPool() → setupRepos() → contract testing*_security_test.go, deep_security_test.go)domain/service/servicetest/contract.go - MockCommands + MockQueriesUsed by app layer unit tests and inbound handler tests.
internal/server/qaseed/seed.go)Deterministic seed for E2E/Playwright tests. Wipes and recreates:
internal/server/qaseed/playwright/playwright/)playwright/tests/
01-home.spec.ts - Login, home, navigation
02-kanban-board.spec.ts - Board display
03-task-management.spec.ts - Task CRUD
04-roles-features.spec.ts - Roles & features
05-backlog-settings.spec.ts - Backlog & settings
06-skills-stats-export.spec.ts - Skills, stats, export
07-theme-comments-ws-health.spec.ts - Theme, comments, WebSocket
helpers.ts - Shared test helpersInteractive elements use data-qa attributes for Playwright targeting: create-project-btn, login-email-input, search-input, nav-kanban-btn, task-open-btn, user-menu-btn, theme-toggle-btn, etc.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.