pm-context-loader — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pm-context-loader (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Loads the user's PM state from pm-state/ so subsequent work has the right context. This is a utility skill, not a workflow skill — its job is to prepare the agent for whatever workflow comes next.
Without this loader, every PM session starts cold. The agent has frameworks (the rest of this repo) but no knowledge of the user's actual projects, stakeholders, or open commitments. With it, every session boots with the user's current state in scope.
Use this as the first step when:
pm-prd-drafter, pm-decision-coach, pm-evaluator) is about to run on a real artifact and would benefit from project contextDon't use this when:
Default location: C:/Users/alexa/OneDrive/Documents/GSB/pm-state/ (user's installation).
If the folder doesn't exist or is empty:
Read these files at the start of every load:
These four files are stable across sessions and define the user's frame.
Determine which project the current workflow is about:
pm-meeting-prep figured it out from the meeting's attendees), use that.If the work isn't project-specific (e.g., a cross-project weekly review), skip this step.
If a project is identified, read its full state:
pm-state/projects/<project>/status.mdpm-state/projects/<project>/decisions.mdpm-state/projects/<project>/open-questions.mdpm-state/projects/<project>/stakeholders.mdpm-state/projects/<project>/todos.mdBefore handing off to the calling skill, emit a one-line confirmation:
Loaded context: you.md (last updated [date]), [N] active projects, project `<name>` in scope.
This is for the user's visibility, not the agent's. The full context is now in scope for the rest of the conversation.
This skill produces context, not artifacts. The output is a single confirmation line plus loaded state available to the rest of the session.
Context loaded.
- Personal style: from you.md (updated [date])
- Active projects: [list]
- Project in scope: [name] (or "none — cross-project workflow")
- Cross-project stakeholders: [N] entries
- Lessons file last updated: [date]you.md was last updated 90 days ago, mention it. The user should know when their context is going dry.you.md is months old or todos.md hasn't been touched in two weeks, mention it. The maintenance contract is what makes the agent useful.Almost all the operate-stage skills start by calling this one:
You can also chain this skill before reactive skills (pm-evaluator, pm-prd-drafter, pm-decision-coach) when the user is critiquing or drafting a real artifact and the project context would inform the critique.
Common invocation patterns:
If invoked when no pm-state folder exists, respond:
"You don't have a pm-state folder set up yet. I can scaffold one at `C:/Users/alexa/OneDrive/Documents/GSB/pm-state/` from the template in this repo, or you can point me at a different location. Want me to set it up?"
If invoked when the folder exists but is empty:
"pm-state exists but `you.md` is missing or empty. Without it, the agent can't reason about your specific work. Let me know if you want help filling it in."
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.