4plus1-models — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited 4plus1-models (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generates Kruchten's 4+1 View Model for any software system.
This skill owns method logic only:
It does not own output-track rendering mechanics for draw.io or Miro.
| View | Who reads it | What it answers | Primary notation |
|---|---|---|---|
| Logical | End-users, analysts, architects | What components exist and how they relate | Mermaid class / component / C4 Container |
| Process | Integrators, performance engineers, operations, BAs | How the system behaves at runtime | Mermaid sequenceDiagram (dev) / flowchart with swimlanes (cross-functional) |
| Development | Developers, software managers | How the codebase is organised | Mermaid flowchart / C4 Component |
| Physical | SRE, infrastructure engineers | How it's deployed and operated | PlantUML deployment + AWS/Azure/GCP stdlib (primary) / Mermaid C4Deployment (fallback) |
| Scenarios (+1) | All stakeholders | Key use cases that exercise the other four | Mermaid flowchart (use-case style) + mini sequences |
Reference files per view: references/logical-view.md, references/process-view.md, references/development-view.md, references/physical-view.md, references/scenarios-view.md.
Decide which mode the user is in. If ambiguous, ask.
Ask if missing:
"Who's the primary audience for this documentation? (a) Dev-only (b) Cross-functional (c) Executive"
Audience determines notation choice per view.
Gather context with one concise checklist first, then only targeted follow-ups if needed.
Start with at most these fields:
Mark assumptions explicitly using > **Assumption:**.
Questioning rules:
Use concerns/README.md to select relevant concern modules.
Default concerns:
gdpr-data-protection.mdsecurity.mdbias-fairness.md (if ML present)regulatory-compliance.md (if regulated domain)Generate in order:
Use templates/view-template.md.
Verify:
If writing to disk, run:
python scripts/validate-views.py <output-directory>For example:
python scripts/validate-views.py docs/architecture[system-name]-architecture/
├── 00-system-context.md
├── 01-logical-view.md
├── 02-process-view.md
├── 03-development-view.md
├── 04-physical-view.md
├── 05-scenarios-view.md
└── diagrams/
└── mermaid/
├── logical-view.mmd
├── process-view.mmd
├── development-view.mmd
├── physical-view.puml
└── scenarios-view.mmdWhen used inside the 4plus1-diagrams workflow, the visual-format skill adds a diagrams/drawio/ or diagrams/miro/ sibling folder alongside diagrams/mermaid/.
Per-view detail:
references/logical-view.mdreferences/process-view.mdreferences/development-view.mdreferences/physical-view.mdreferences/scenarios-view.mdNotation cheatsheets:
references/notation-mermaid.mdreferences/notation-plantuml.mdreferences/notation-bpmn-in-mermaid.mdConcerns:
concerns/README.mdconcerns/gdpr-data-protection.mdconcerns/security.mdconcerns/bias-fairness.mdconcerns/regulatory-compliance.mdconcerns/sustainability-climate.mdconcerns/accessibility.mdTemplate:
templates/view-template.mdWorked example (core views):
examples/synth-claim/Scripts:
scripts/validate-views.py~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.