dev-architecture-playbook — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dev-architecture-playbook (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this as the lifecycle router before starting broad product or architecture work. It chooses the minimum useful skill chain, defines gates, and prevents starting implementation before the required contracts exist.
Classify the request first:
| Request | Primary Skills | Output |
|---|---|---|
| Idea, product direction, or market/user problem | product-discovery, prd-master | Product brief, user stories, success metrics |
| Architecture or module boundaries | architecture-foundation, technical-spec, elegant-architecture | Architecture spec, boundaries, rejected alternatives |
| API, auth, data, or schema contract | api-design, auth-security, database-patterns, data-contract-migrations | Versioned contracts and migration plan |
| UI/product surface | frontend-design, ui-ux-pro-max, ui-design-system, playwright-automation | UX flow, component plan, visual checks |
| Implementation workflow | fixflow, plan-flow, threads, systematic-debugging | Step-test-update plan and ownership |
| Quality and regression risk | comprehensive-testing, codebase-audit, vibeguard, project-health-auditor | Test matrix and risk list |
| Release and operations | release-engineering, config-secrets-environments, performance-capacity, incident-slo-runbook, observability-sre, devops-excellence | Rollout, config, capacity, SLO, runbook |
Do not treat the architecture as complete until these gates are explicit:
If a gate is irrelevant, state why. Do not silently skip data, security, or rollback gates for production systems.
Use this sequence for greenfield or major refactors:
For existing repos, start with repo-agent-context-audit or codebase-audit before proposing new structure.
Return a compact plan:
goal:
context:
selected_skill_chain:
architecture_gates:
implementation_steps:
verification_commands:
release_and_ops_gates:
open_risks:Prefer the smallest chain that covers the risk. Too many skills at once usually means the scope needs to be split.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.