cities2-mod-release-e25741 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cities2-mod-release-e25741 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill before packaging, uploading, publishing, distributing, or otherwise releasing a CS2 mod. The goal is to prevent ordinary release mistakes before they reach players.
Use MCP server wiki/reference lookup for CS2-specific packaging, toolchain, and modding claims before treating them as release requirements. Use project files, build output, package contents, logs, screenshots, and user playtesting notes as release evidence.
A successful build is not enough for distribution. Before public release, require local playtesting of the packaged mod in game, or an explicit user override that the release is not gameplay-verified.
An override is valid only if, after you restate that the mod has not been locally playtested, the user explicitly confirms they understand that risk and still want an unverified package. A casual request such as "release it now" or "it is tiny" is not enough. Without local playtesting or that explicit override, do not create a distribution package, final upload text, or any handoff that calls the mod ready for public upload.
If the user chooses the override, label the release notes or handoff as not gameplay-verified and list the missing checks. Do not imply Paradox Mods readiness from compile/package success alone.
For save-affecting mods, pause before release if testing used only a live save. Prefer backed-up saves, copied-save workflows, offline reproduction, and supported APIs.
the game must be closed before local mod files are replaced.
Modding.log and game logs after launch and after exercising the main feature.Public source does not automatically grant redistribution rights. Before releasing copied, forked, derived, or bundled work, check the license and original mod/source terms.
Keep attribution, license files, copyright notices, asset credits, and required source links. Do not remove notices to make a package look original. If rights are unclear, pause and ask the user whether they have permission or want help replacing the dependency.
When adapting ideas without code/assets, still credit inspirations when the community context expects it, but distinguish courtesy attribution from legal license obligations.
Return a release decision first: ready, ready with explicit user override, or blocked. Then list concrete blockers, warnings, and the smallest next checks.
Use practical language: what must change before upload, what should change soon, and what can wait. Keep normative modding constraints separate from descriptive gameplay statements.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.