supplement-scorer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited supplement-scorer (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Turns a supplement product into auditable scores on formula, quality, and safety (0-100 each, plus an overall). The numbers come from a deterministic engine, never from your own estimation — so the same product always gets the same score, and every number is explainable.
Gather the product from whatever the user gave you — a pasted ingredient list, a described product, or a supplement-facts photo (read the label; estimate doses you can't read cleanly and say so).
{
"name": "Gentle Iron + Folate",
"brand": "Acme",
"certifications": ["GMP", "third_party_tested"],
"ingredients": [
{"name": "Iron", "nutrient": "iron", "form": "ferrous bisglycinate", "amount": 18, "unit": "mg"}
]
}nutrient must be a key from references/ingredients.json (iron, folate, vitamin_d, vitamin_b12, vitamin_b6, vitamin_c, vitamin_e, vitamin_a, vitamin_k, calcium, magnesium, zinc, iodine, choline, omega3_epa_dha, melatonin, creatine, coq10, ashwagandha, collagen). For an ingredient with no matching key, still include it with its name; the engine reports it as not-yet-covered.
python {skill_dir}/scripts/score.py --json '{...the product json...}'Add --pregnant if the user is pregnant or nursing. The script prints JSON with formula, quality, safety, overall, flags, unknown, coverage, rationale, and disclaimer. To compare products, run it once per product.
rationale and flags, in the user's language,concisely.
unknown is non-empty, say plainly that those ingredients aren't coveredand the score only reflects coverage of the formula.
disclaimer.maintain"); never disease claims ("treats", "cures", "prevents [disease]"). Don't advise starting/stopping medication; refer symptoms to a professional.
reference values are an international baseline that varies by country.
For the full scoring logic, the honesty framing, and detailed compliance guidance, read references/methodology.md. The tunable weights and the ingredient reference table are in references/ingredients.json.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.