pipeline-scaffold — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited pipeline-scaffold (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Creates a new ICM (Interpretable Context Methodology) pipeline — a sequential, human-reviewed AI workflow built from numbered stage folders and file-based handoffs.
Use this skill when:
Ask the user for:
If the user gives a vague request like "set up a pipeline for video production", infer reasonable stages and confirm before proceeding. Default to 3-5 stages — fewer is better.
Do NOT proceed without at least a domain name and stage list.
Confirm the target directory. Options:
workspaces/podcast-pipeline/)If the target already contains numbered stage folders, warn the user and ask whether to overwrite or create alongside.
For each stage, create:
{NN}_{stage-name}/
CONTEXT.md # Stage contract (Step 4)
references/ # Layer 3: stable reference material (empty)
output/ # Layer 4: working artifacts (empty)Stage numbering: 01_, 02_, etc. Use snake_case for stage names. Zero-pad to two digits.
Layout note: FSP scaffolds stage folders at the pipeline root by default. The ICM paper's canonical layout (Fig. 2) nests them under a stages/ directory and adds optional shared/ and setup/ folders. Both layouts are valid — all FSP skills detect both. If the user asks for the canonical ICM layout, nest under stages/.
Also create:
_config/ at the pipeline root — for workspace-wide settings (voice, style, brand). Include an empty placeholder README.md explaining its purpose.CONTEXT.md — pipeline-level routing (Step 5)Each stage's CONTEXT.md must follow this format exactly:
# Stage {NN}: {Stage Name}
{One sentence: what this stage does and why it exists.}
## Inputs
| File | Source | Layer | Purpose |
|------|--------|-------|---------|
| {file} | {path or previous stage output/} | 3=reference / 4=working | {why this file is needed} |
## Process
1. {First instruction}
2. {Second instruction}
3. {Third instruction}
## Outputs
| File | Destination | Format |
|------|-------------|--------|
| {file} | output/ | {markdown, JSON, etc.} |
## Review Checkpoint
Before advancing to the next stage, verify:
- [ ] {First check}
- [ ] {Second check}Rules for writing contracts:
output/ directoryThe pipeline-level context file routes across stages:
# {Pipeline Name}
{2-3 sentences: what this pipeline produces, who it's for, what makes it different from doing this manually.}
## Stage Overview
| Stage | Name | Reads From | Writes To |
|-------|------|-----------|-----------|
| 01 | {name} | _config/, user input | 01_{name}/output/ |
| 02 | {name} | 01_{name}/output/ | 02_{name}/output/ |
| ... | ... | ... | ... |
## How to Run
1. Place your input material in `01_{first-stage}/references/` or as specified in its contract
2. Run each stage sequentially using `/run-stage`
3. Review output at each stage boundary before advancing
4. Use `/stage-review` to verify readiness before moving on
5. Use `/validate-pipeline` to check the full contract chain
## Conventions
- Stage folders use `{NN}_{name}/` format
- Each stage has `references/` (stable) and `output/` (per-run)
- Files in `_config/` apply to all stages
- Output of stage N is input to stage N+1 — never skip stagesAfter generating all files, run a file tree of the pipeline root and display it to the user:
find {pipeline-root} -not -name '.DS_Store' | sortConfirm the structure looks correct before finishing.
Tell the user:
_config/ and stage-specific references/ folders/validate-pipeline to verify the contract chain is consistent/run-stage 01For reference, the canonical stage contract format:
# Stage {NN}: {Stage Name}
{Purpose sentence.}
## Inputs
| File | Source | Layer | Purpose |
|------|--------|-------|---------|
| voice-guide.md | _config/ | 3 | Writing style and tone constraints |
| research-output.md | 01_research/output/ | 4 | Raw research to transform into script |
## Process
1. Read all Layer 3 inputs — internalize as constraints (do not copy, embody)
2. Read all Layer 4 inputs — these are the material to process
3. {Domain-specific instruction}
4. Write output to the Outputs location
## Outputs
| File | Destination | Format |
|------|-------------|--------|
| script-draft.md | output/ | Markdown with scene headers |
## Review Checkpoint
Before advancing to the next stage, verify:
- [ ] Output follows voice guide constraints
- [ ] All source material from research was addressed
- [ ] No hallucinated facts — everything traces to an input~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.