ordito-create-page — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ordito-create-page (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Ordito の 書き込みスキル(作成スキル, 仕様 §7.1)。新規 IR ドキュメント(ページ)を1つ作る(§3.2)。
doc(論理パス)を作る。ordito-update-block)/既存ページにブロックを足す(ordito-add-block)/ナビだけ並べ替える(ordito-edit-collection)/HTML を作り直す(ordito-generate)。--input <file>){
"doc": "guides/getting-started",
"title": "はじめに",
"blocks": [
{ "type": "heading", "level": 1, "text": "はじめに" },
{ "type": "paragraph", "text": "このページは…" }
],
"meta": { "order": 1, "tags": ["guide"] },
"nav": { "under": ["ガイド"], "order": 1 }
}doc(必須): 新しいページの論理パス id。index は予約で不可(§3.6)。既存 id と重複ならエラー。title(必須): meta.title。blocks(任意): 初期ブロック配列(語彙10種, §3.3)。id を省いたブロックは自動採番(b1,b2…)。meta(任意): order / tags / sources などの追加メタ。title/updated_at/generated_at は本スキルが設定する(上書き)。nav(任意): 指定すると 同時にナビへ掲載する。under(グループ名の配列)配下に { doc } を追加。order/label 任意。省略時は下書き(孤立ページ)として作成(§3.7: 既定で生成対象外)。ir_dir / collection(任意): 省略時は ordito.config.json から解決。dry_run(任意): true で書き込まずプレビューのみ。{ ok, doc, created, file, in_nav, updated_at, generated:false, note } in_nav:false のときは下書き。公開には ordito-edit-collection でナビ追加 → ordito-generate。
echo '{"doc":"guides/getting-started","title":"はじめに","nav":{"under":["ガイド"]}}' \
| node "${CLAUDE_SKILL_DIR}/create-page.js"~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.