skill-authoring-fb2ba0 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-authoring-fb2ba0 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create skills that fit this repo's conventions. Do not vendor external skills raw when the project already has overlapping skills or stronger local patterns.
.agents/skills/<skill-name>/..claude/skills/<skill-name>/ and is refreshed bypowershell -ExecutionPolicy Bypass -File scripts/sync-skills.ps1.
SKILL.md. Add references/ or scripts/ only whenrepeated detail or deterministic logic justifies it.
name and description.file layouts, naming, or docs blindly.
README.md, CHANGELOG.md, CONTEXT.md, oragents/openai.yaml unless the repo explicitly adopts those patterns.
Before adding a skill:
using-agent-skills.Write down:
If two skills would trigger on the same requests, narrow one or both descriptions until the handoff is obvious.
Create .agents/skills/<skill-name>/SKILL.md with:
Keep instructions procedural. Avoid background theory unless the theory changes execution decisions.
Add references/ when:
SKILL.mdAdd scripts/ when:
If the new skill changes discovery behavior, patch using-agent-skills/SKILL.md so future sessions know when to route to it.
After edits:
powershell -ExecutionPolicy Bypass -File scripts/sync-skills.ps1python scripts/validate_skills.pygit diff --check -- .agents/skills .claude/skillsSKILL.mdWhen two skills overlap:
using-agent-skills as the dispatcher.specific one and import only the useful heuristics from the generic source.
.claude/skills after editing .agents/skillsscripts/validate_skills.py; manual review alone misses drift.agents/skills/<name>/SKILL.mdusing-agent-skills is updated if discovery changedscripts/sync-skills.ps1python scripts/validate_skills.py passesgit diff --check is clean for skill files~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.