coding-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited coding-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
gh)Always use the gh CLI for all GitHub operations. Both gh and git are authenticated automatically through the agent proxy.
Use gh for: cloning repos, discovering repos across orgs, creating/viewing/editing PRs, checking PR status, and viewing PR comments.
Do NOT use unauthenticated git clone https://github.com/... — use gh repo clone instead.
When you don't have write access to a repository (push fails with 403/permission denied):
gh repo fork --remote=true (this adds your fork as the origin remote and renames the original to upstream)git push -u origin <branch-name>gh pr create --repo <upstream-owner>/<repo>To avoid wasted time, check write access early. If the repo belongs to an organization you're unlikely to have push access to, fork before starting work.
main or master)fix-login-redirect, add-csv-export)fix redirect loop on login, add CSV export endpointgh to get the branch name, check it out, push changes, and update the PR description---
🤖 *Generated by Computer*~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.