ambit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ambit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Ambit tracks which parts of a codebase this agent has actually read, at symbol resolution. Use it to verify you have enough context before acting — and to identify blind spots before making changes that touch unfamiliar code.
BEFORE modifying a file — if you haven't verified you've read it this session:
mcp__ambit__coverage_file → check the specific file(s) you're about to changeBEFORE architectural decisions — if you're proposing design changes across multiple files:
mcp__ambit__coverage → check overall module coverage; proceed only if Seen% > 60%When a bug is hard to reproduce or diagnose — low coverage on the relevant file is a likely root cause of bad recommendations:
mcp__ambit__coverage_file → if Full% < 50%, read the file before diagnosingAfter receiving a multi-file task — check coverage of the involved files before starting; flag which ones need reading first.
When your suggestion might be wrong — if a user pushes back, check coverage. You may have missed implementation details.
Thresholds can be passed directly when invoking the skill:
/ambit --proceed=80 --adequate=50| Argument | Default | Meaning |
|---|---|---|
--proceed=N | 80 | Minimum Full% to proceed without reading more |
--adequate=N | 50 | Minimum Full% for targeted/interface-only changes |
--module=N | 60 | Minimum Seen% across a module for architectural tasks |
If no thresholds are provided and the task is non-trivial, ask the user:
"What coverage level is acceptable before I proceed? (default: 80% full body)"
Use the user's answer for all subsequent threshold decisions in the session.
Full% on a file vs --proceed | Action |
|---|---|
| ≥ proceed | Sufficient context — proceed |
| ≥ adequate, < proceed | Adequate for targeted changes — note gaps |
| < adequate | Read the file before making changes |
| 0% | Do not make recommendations without reading first |
For architectural or refactoring tasks, also check module-level Seen% against --module.
Prefer these over bash when the MCP server is available (check mcp__ambit__* in your allowed tools):
| Tool | When to use |
|---|---|
mcp__ambit__coverage | Overall project coverage for the current session |
mcp__ambit__coverage_file | Coverage for one specific file — fastest check before editing |
mcp__ambit__symbol_tree | Full symbol tree — use when you need to understand project structure |
mcp__ambit__list_sessions | Find available sessions — use when session context is unclear |
If MCP tools are unavailable:
# Coverage for the current session
ambits -p . --coverage
# Coverage for a specific file (pipe and grep)
ambits -p . --coverage | grep "src/my_file.rs"
# Specific session
ambits -p . --coverage --session <session-id>
# Full symbol tree
ambits -p . --dumpFile Seen% Full%
──────────────────────────────────────────────────────────
src/app.rs 100.0% 85.0% ← well understood
src/parser/rust.rs 40.0% 10.0% ← blind spot
src/ingest/mod.rs 0.0% 0.0% ← unreadA file at 100% Seen / 10% Full means you saw the signatures but not the bodies. For anything you're actively modifying, Full% matters more than Seen%.
High Seen%, Low Full% — You know the structure but not the implementations. Safe for interface-only changes; risky for behaviour changes.
Low Seen%, Low Full% — Genuine blind spot. Read the file before touching it.
Specific symbol at 0% — If the task involves that symbol, read it first using Read or Serena's find_symbol with include_body: true.
If coverage on files you need is insufficient:
mcp__ambit__coverage_file or ambits --coveragefind_symbol with include_body: true,or Read for the full file)
| Flag | Description |
|---|---|
-p | Project root path (required) |
-s | Session ID (auto-detects latest) |
--coverage | Print coverage report |
--dump | Print symbol tree |
--serena | Use Serena LSP symbols (more languages, finer detail) |
--agent | Filter to a specific agent ID |
No session found — Sessions live in ~/.claude/projects/<slug>/ where the slug is your project path with / replaced by -. The latest .jsonl file is the current session.
Coverage shows 0% for a file you've read — Coverage tracks tool calls only (Read, Edit, find_symbol, etc.). Mentioning a file in conversation without reading it via a tool does not count.
File not in the coverage report — The file may not have parseable symbols (empty file, non-code file, or unsupported language without --serena).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.