skill-overlay — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-overlay (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill after skill-adopter has proven that an upstream Skill can be fetched and pinned, but raw adoption does not meet Kun runtime policy.
The goal is to keep the upstream update path intact while applying a small replayable compatibility layer. Do not silently edit a copied upstream Skill by hand.
In this public edition, an overlay can target any pinned public Git repository or local upstream Skill directory. If a private registry is unavailable, keep the overlay manifest, generated references/official-basis.md, and local skills-lock.json as the proof surface. Do not claim organization-level registry promotion unless the user has actually added one.
/skill-overlay(manifest, target_root?, lock_file?)references/official-basis.md, then read the overlay manifest and confirm the pinned upstream source, ref, and skill path.scripts/apply_overlay.py.quick_validate.py and audit_skill.py.skills-lock.json evidence in the registry.overlay_manifest_gap, upstream_policy_gap, or validator_policy_gap; do not mark the Skill adopted.WORKFLOW.md exists or add it as part of the overlay contract before marking the repo workflow-ready.Allowed default overlay changes:
SKILL.md frontmatter to Kun-compatible name and description;README.md into a generated upstream README reference;agents/openai.yaml;references/upstream/ source-tree mirrors, keep those files as the maintenance/adoption/audit proof source.scripts/, assets/, templates, schemas, and fixtures when they are part of the upstream capability.scripts/ or assets/ only when the overlay intends to use them; otherwise mark them as evidence-only source-tree payloads.Not allowed by default:
official-overlay when SKILL.md does not require reading the generated official-basis reference at runtime.references/upstream/ without either a full-runtime read requirement or a progressive runtime contract that points ordinary runtime to the generated runtime-rules reference and maintenance/adoption/audit to full upstream reads.references/upstream/ as operational runtime dependencies. Evidence mirrors are read/inspected; operational code and media must be projected into local scripts/ / assets/ with lock/hash evidence.WORKFLOW.md is required for composite skill repos.Durable manifests live in kun-agent-registry/overlay-catalog/. This skill does not keep demo overlay manifests as local source truth.
Apply an overlay manifest:
python3 scripts/apply_overlay.py <kun-agent-registry>/overlay-catalog/<skill-id>.overlay.yaml \
--target-root .agents/skills \
--lock-file skills-lock.json \
--forceManifest format is documented in references/overlay-manifest-format.md.
route: official-overlay
source: <repo/url/ref/skill_path>
installed: <target skill dir>
overlay: <manifest path and applied operations>
lock: <skills-lock.json tree/file hashes>
source_tree_payload: <docs/scripts/assets/templates/fixtures inventory and role>
operational_projection: <local scripts/assets copied or blocked/evidence-only>
chain: standalone | <chain_id/position/consumes/produces/handoff_status/next_skill/proof_surface>
state_machine: standalone | WORKFLOW.md | runtime_lifecycle
validation: <quick_validate/audit result>
next: adopted | registry-update | blockedscripts/apply_overlay.py: replay an official-overlay manifest.references/overlay-manifest-format.md: manifest schema and promotion rules.skills/skill-overlay/ and remove it from skill-registry.yaml.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.