context-compression — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited context-compression (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When working in this project, do not feed noisy raw outputs or large files directly into context.
Tokenless is mandatory for large or noisy context:
tokenless read --agent --data-dir <dir> <file>.tokenless run --agent --data-dir <dir> -- <command>.NEXT REQUIRED COMMAND.The hook automatically caps high-noise Bash commands and large low-risk Read outputs through Tokenless.
Keep tool inputs small:
tokenless read, tokenless expand, and small bounded Edit/MultiEdit calls over large patch scripts.cat > file <<EOF, giant node -e / python - commands, or temporary apply/fix/rewrite scripts unless the user explicitly asks.For manual local development in this repository, use ./plugins/claude-code/bin/tokenless or the packaged tokenless alias:
./plugins/claude-code/bin/tokenless run --agent --data-dir /tmp/tokenless-dev -- npm testHigh-noise commands include:
When you see a TOKENLESS-PACKET block:
Raw artifact: line.When you see a TOKENLESS-READ-PACKET block:
Action boundary before running any other command. It defines what tool commands are valid for this artifact.Action brief and Editable snippets, treat those snippets as the first-pass edit surface, not as a table of contents to explore.Read to register editor state if you plan to edit, then make 6-10 bounded Edit calls from the snippets before doing more exploration.Action boundary when a needed old_string is not present in the snippets.grep, rg, sed, or small Read calls to re-map the same file after a packet has already identified the edit targets.Tool boundaries:
tokenless read creates a whole-file packet only.tokenless read is not a range, selector, or line lookup tool.tokenless read --range, tokenless read --selector, tokenless read --lines, or similar flags.tokenless expand is the artifact lookup tool for a specific selector/text or line range.tokenless show / raw artifact access is not for normal editing.Large CSS visual-edit protocol:
TOKENLESS-READ-PACKET, do not perform a second full-file read.Editable snippets: tokens/variables, background layer, shared cards, buttons, one optional hero/visual area, one optional timeline/footer area.Read, make 6-10 bounded Edit calls when the snippets are sufficient.old_string is missing, use at most two tokenless expand lookups before the first edit.File must be read first; proactively do one minimal native Read only to register editor state, then immediately edit. If the error still appears, do not remap the file.Large source edit protocol:
TOKENLESS-READ-PACKET for .js, .jsx, .ts, .tsx, .py, .vue, or .svelte, do not perform a second full-file read.Read only to register editor state if you plan to edit.Source map, SFC sections, Project file hints, and Editable snippets as the first-pass edit surface.Edit calls from the snippets; do not remap the file with grep, rg, sed, or repeated Read calls.old_string is missing, use at most two tokenless expand lookups before editing.For multi-file JS/TS/Python/Vue/Svelte tasks:
Project file hints before running ls, find, or broad rg.Trajectory budget:
Read when editing, zero artifact expands unless required, one bounded serial Edit phase, concise final answer.tokenless expand calls are a soft budget, not a hard denial. The 3rd lookup may include a warning; later lookups may be compacted. Treat either as a signal to edit from existing evidence unless the user requested exact review/security/legal/syntax validation.Large-file edit discipline:
Edit calls because this Claude Code environment may not expose MultiEdit.Edit or bounded MultiEdit keeps a Tokenless edit lease for the same file.tokenless read again after Write, large edits, external file changes, lease exhaustion, or when Tokenless explicitly blocks with TOKENLESS-STALE.When a large Read is capped:
tokenless read command shown by the hook.cat, unbounded grep, or a full-file Read.When Tokenless prints NEXT REQUIRED COMMAND:
cat, a full-file Read, or broad file dumps against the gated file first.Bounded commands are allowed after Tokenless has created the packet:
sed -n '100,160p' filerg -n "target" filetokenless expand <artifact_id> --around "target"Bounded commands are fallback tools after the packet, not the default path. If the packet provides snippets for the intended edit, edit first. Bounded commands are not a replacement for the initial large-file Tokenless packet when the file is known to be large. Large generated commands are not bounded, even if they write locally. Avoid large heredocs, large inline scripts, and temporary patch helpers unless the user explicitly asks for them.
Never assume omitted sections are irrelevant if the task requires exact full-text review. For legal, financial, security-critical, or exact patch review tasks, inspect raw artifacts when necessary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.