commit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited commit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Commit staged changes w/ well-crafted message.
git diff --cached --stat → see what stagedgit diff --staged → reviewgit log --oneline --max-count=10 → recent patternstype(area): concise imperative descriptionfix, feat, refactor, chore, docs, test<area>) git commit --message "$(cat <<'EOF'
<title>
<optional body>
EOF
)"git status → confirm clean stategit log --max-count=1 → show created commitSimple:
fix(server): add validation for email inputWith body:
refactor(server): replace session-based auth with JWT tokens
- Replace session-based auth with JWT
- Add token refresh endpoint
- Update middleware to validate tokens
- Add tests for token expirationPre-publish: rg --pcre2 '[∀∃∴⊥∈∉∧∨≤≥≠≡¬]' <body> on commit body before §5 git commit; match → bail and rewrite per core:steno register before mutation.
Apply core:steno to commit message body. Conventional Commits prefix (type(area):) and identifiers / paths / #refs / error strings / SHAs preserved verbatim.
type(area): imperative descriptionfix login bug (#42))Heading ## Next; 1–5 atomic items (one sentence each, no Reply prefix); positional dispatch (run <int> or run /<plugin>:<cmd> [args]). Commit lands → follow-up usually /gh:pr (open PR from this branch) or /gh:merge (if branch already has open PR) or resume work w/ more staged changes.
Canonical example after commit lands:
## Next
1. git push origin <branch> — publish the commit
2. /gh:pr — open a PR for the branch
3. /gh:merge — squash-merge if a PR is already open~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.