nebo-coding-patterns — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited nebo-coding-patterns (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Триггеры: "рефакторинг", "код ревью", "дебаг", "архитектура", "паттерн", "performance", "bulletproof"
1-2 files changed? → S: Lightweight (no spec, just code + test)
3-10 files? → M: Research → Spec → Plan → Implement → Review
10+ files? → L: Full pipeline with handoffs between stages
Context > 40%? → /compact now, /clear between stages
Stuck on bug? → Reproduce → Isolate → Understand → Fix → Verify1. Research: Explore agents + WebSearch → thoughts/research/topic.md → /clear
2. Spec: inputs, outputs, edge cases → specs/feature-spec.md → /clear
3. Plan: phases, file groups, dependency order → plans/feature-plan.md → /clear
4. Implement Phase 1 → Self-audit → Tests → Phase 2 → ...
5. Integration test all phases
6. Final review + commit1. REPRODUCE — minimal test case that triggers the bug
2. ISOLATE — git bisect or binary comment-out
3. UNDERSTAND — read error stack top-down, check assumptions
4. FIX — minimal change addressing ROOT CAUSE
5. VERIFY — run fix + add regression test
6. DOCUMENT — comment if non-obviousAgent 1-2: CLAUDE.md compliance check
Agent 3: Bug scan in changed lines
Agent 4: Git blame context analysis
Rule: only post issues with confidence >= 80EXTRACT — repeated logic used >= 3 times → function/component
RENAME — grep all usages, update imports, run tests
DEAD CODE — tsc --noUnusedLocals, eslint no-unused-vars
SIMPLIFY — early returns to reduce nesting, remove unnecessary abstractions# progress/<task>-handoff.md
## What was done
## Key decisions
## Open questions
## Next steps
## Files changedRepository pattern → need to swap data layer (testing, migration)
Service layer → business logic shared across HTTP/CLI/queue
Event-driven → decouple producers from consumers
CQRS → complex domain with different read/write models
Feature flags → trunk-based dev, gradual rolloutBundle: lazy(() => import()), manual chunks for vendor/heavy libs
Images: width/height, lazy, WebP/AVIF, placeholder blur
Runtime: useMemo for expensive compute, virtual scroll for 100+ items
DB: select_related / prefetch, bulk operations, proper indexes
Vitals: LCP < 2.5s, INP < 200ms, CLS < 0.1~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.