leadup-status-updater — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited leadup-status-updater (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Maintain the project's single source of truth. After any task, record what was done, what's in progress, real bugs, blockers, and the one next recommended task — and surface "what next" instantly when asked.
Trigger phrases: "update status", "update STATUS.md", "what next", "what's next", "what still left", "make TODO", "continue from STATUS.md", "log this in the changelog", "where are we".
For a full cold-start analysis of an unfamiliar repo → use leadup-existing-repo-analyzer (this skill maintains memory; that one reconstructs it from scratch).
STATUS.md/TODO.md/CHANGELOG.md if present.Use references/status-template.md. Reusable stub: assets/STATUS.template.md.
recommended task / Deploy state. Keep it short and honest.
never erase history.
always asks "what next").
See references/security-rules.md. Most relevant here:
trigger phrases.
leadup-existing-repo-analyzer.
Markdown for the user to paste.
template and say they were created.
the error summary — do not mark the task done.
Done, the billing bug under Bugs, and a filled Next recommended task.
untouched.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.