potential — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited potential (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Bedrock walks the building as the inspector; potential stands across the street as the developer — the one who looks at a warehouse and sees the loft. Same building, opposite posture. But the developer is still an engineer: they do not see what they wish were there, they see what the structure wants to become. Every vision is read off real beams.
The skill exists because builders, like auditors, see locally: heads-down sprints add what was asked and never notice what the accumulated structure now makes nearly free. Potential is the deliberate step back across the street.
No idea without structural evidence. Every vision must point at the existing structure that carries it — "you already built X and Y; Z is implied, and the building already does most of it." If an idea could have been generated without reading this codebase — add dark mode, add export, add AI — it is a PM listicle item, not a potential, and it dies before the report. Existing structure earns an idea a closer look; usefulness and the cost of keeping it alive still need their own evidence.
Use this skill when the user asks for any of these:
Do not use it for: implementing a feature the user already decided on (just build it), market or competitor research (potential reads this building, not the market), auditing fragility (that is bedrock), or studying a codebase before changes (that is devour).
Open mode — no seed. Walk the building, come back with a small portfolio of what the structure wants to become. The building speaks first.
Wish mode — the user brings a wish: "I wish it could X." Read the structure and give the wish a real answer. If the vision declares an adopted system twin, take the wish to the twin first — "how does a hospital interrupt people?" — and let the proven pattern shape the answer before grading what the structure can carry:
little it is.
what would have to exist first.
something adjacent and better. Reshaping the wish is a first-class outcome, not a failure to answer.
In both modes the output is a grounded opportunity. Potential itself never implements or writes files. A standalone request ends with those opportunities. When the user chooses one and authorizes building, leave this mode and carry the evidence into that work without requiring another invocation. Use decide if a consequential choice remains, or probe for an assumption that must be tested first; neither is mandatory. For longer journeys, use WORKFLOWS.md.
This skill must work in Codex, Claude Code, and any other coding-agent host. Use whatever file, search, and git tools the host exposes; never depend on a host-specific tool by name. Cite structure in plain file/flow terms any host could follow.
not from brainstorming over it.
visions, fewer when the evidence supports fewer. Wish mode addresses the wish without padding it into a portfolio. Each opportunity carries its evidence.
CLAUDE.md / AGENTS.md, stated intent) before dreaming. A potential either serves that vision or is honestly flagged as extending it — never silently redirecting it.
can feel the real distance from here to there.
Five ways a building reveals what it wants to become. Run them across the structure; they are the dreamer's question bank:
engine is built; the throttle is barely open. What does full extraction look like?
structure already does most of it. Features wanting to be born.
nobody has connected them.
vision of all: the room is built, just unlock it.
hardcoded path that is one parameter away from a capability.
Before any vision is voiced:
VISION.md at the repo root if it exists (the visionskill's artifact), otherwise README / CLAUDE.md / stated intent. What the building is trying to be is the frame everything hangs inside.
MAP.md is at the repo root (devour's persistedatlas), read it: it is the structure to dream from. If AUDIT.md is there too (bedrock's ledger), read that as well: the load-bearing map says what the structure can carry, the feature inventory says what exists to squeeze. Same building, other side of the street. Treat both as claims to spot-check, not truth.
shared machinery, what writes state — enough to cite real beams. Depth of evidence over breadth of coverage.
Every vision cites its beams as file or flow references a stranger could check.
Every vision carries an honest distance grade:
plainly, never disguised as one-beam.
Plus vision-fit: serves the stated vision, or extends it (flagged, so the user decides whether the building's ambition grows).
These grades describe structural distance. They are not calendar estimates, evidence of demand, or permission to ignore rollout, integration, support, and operating costs.
For each serious opportunity, answer briefly:
Cite existing user evidence when available; otherwise label the benefit as a hypothesis.
and which support, data, compatibility, or service costs continue after the build? Mark ownership and costs unknown when they have not been established.
are unknown, say so rather than inventing a roadmap.
narrowing the audience deliver most of the benefit? Keeping the current behavior can also be reasonable.
Give a provisional judgment: worth exploring, conditional on evidence, or leave dormant, with the reason. Keep an interesting but unproven opportunity visible without presenting it as a recommendation to build. Deep comparison and commitment belong to decide; potential supplies the candidates and the evidence that makes them credible.
Like isomorph, a correct run feels like two people standing across the street from the same building, pointing. Never a one-shot dump.
structure, distance and fit, ongoing burden, opportunity cost, smaller alternative, provisional judgment*. Keep each concise; a small table can carry the comparison. For exploration alone, stop and let the user point. For an already-authorized workflow, pass the findings to the next stage with the user's priorities intact.
it, what is genuinely missing, what it would unlock next (potentials compound), and the first beam to place if they ever build it.
the structure suggests a sharper wish, offer it back. The user's wish is a direction, not a spec — same as isomorph's first latch.
product-speak.
A run is good only if:
held.
smaller alternative, with missing evidence explicitly marked.
inferred merely because supporting code exists.
A pretty idea with no beams under it is decoration. Cut it or find its evidence. If technical proximity is the only argument for pursuing it, redo the value assessment.
only when implementation is already authorized.
flagged, never smuggled.
is exactly the slop this skill exists to refuse.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.