agentic-engineering — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentic-engineering (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill for engineering workflows where AI agents perform most implementation work and humans enforce quality and risk controls.
Apply the 15-minute unit rule:
Prioritize:
Do not waste review cycles on style-only disagreements when automated format/lint already enforce style.
Track per task:
Escalate model tier only when lower tier fails with a clear reasoning gap.
#### Anti-Hallucination Protocol
Before implementing any non-trivial integration, external API, or library usage:
#### Approval Protocol
#### Side-Effect Disclosure
Before proposing any configuration change, infrastructure modification, or destructive operation:
#### Question Protocol
When you have open questions before writing code:
#### File Creation Constraints
Do not create any of the following ephemeral files:
Task.md, Walkthrough.md, Summary.md, Notes.mdThese add noise to the repository. If persistent documentation is needed, update the relevant SKILL.md, README.md, or AGENTS.md instead.
Always prefer the dedicated tool over a shell command:
| Operation | Use this | Not this |
|---|---|---|
| Read a file | Read tool | cat, head, tail |
| Edit a file | Edit tool | sed, awk, heredoc |
| Create a file | Write tool | echo >, tee |
| Find files | Glob tool | find, ls |
| Search content | Grep tool | grep, rg |
| Everything else | Bash | , |
Reserve Bash exclusively for operations that have no dedicated tool equivalent (running tests, installing packages, git commands).
#### 70% Utilisation Threshold
When context utilisation reaches 70%:
#### Large Task Decomposition
Break any task > ~15 minutes of work into units of:
#### Parent Agent Responsibilities
#### Sub-Agent Constraints
authorisation
Stop and ask the user when any of the following occur:
Do not brute-force past blockers. Pause, diagnose, and escalate.
#### Mental Compiler Check
Before presenting any code:
// Mental check example:
async function getUser(id: string) {
const user = await db.findById(id)
// ✓ null-check: what if user is null?
return user.name // FAIL: potential null dereference
}
// After check:
async function getUser(id: string) {
const user = await db.findById(id)
if (!user) throw new Error(`User ${id} not found`)
return user.name // PASS
}~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.