run-stage — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited run-stage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Executes a single pipeline stage by following its CONTEXT.md contract. Loads only declared inputs, produces only declared outputs, and pauses for human review before advancing.
Use this skill when:
Determine which stage to run:
# Find numbered stage folders
ls -d [0-9][0-9]_*/ 2>/dev/null || ls -d stages/[0-9][0-9]_*/ 2>/dev/nullIf no numbered stage folders exist, halt: "No pipeline stages found. Use /pipeline-scaffold to create one, or ensure stage folders follow the {NN}_{name}/ naming pattern."
Open {stage-folder}/CONTEXT.md. Parse three required sections:
If any section is missing, halt and report the gap:
For each file in the Inputs table:
Layer 3 (reference): Read from the declared source (references/, _config/, shared/). These are stable constraints — style guides, voice docs, design systems, conventions. Internalize these as rules. Do not quote them in the output; write as if you've absorbed them.
Layer 4 (working): Read from the declared source (usually a previous stage's output/). These are the material to transform — research output, drafts, data. Process these as input. Extract, analyze, and transform them according to the Process section.
If an input file is missing:
output/, suggest running that stage firstToken budget awareness: Only load the files listed in the Inputs table. Do not read other files in the stage folder, other stages' folders, or the project root beyond what's declared. This scoping is what prevents context window bloat.
Follow the Process section instructions sequentially:
Layer 3 vs Layer 4 attention:
Write results to the locations declared in the Outputs table:
output/ directory (or other declared destination)Guardrails:
references/ or _config/ — those are read-onlyAfter writing all outputs, display:
## Stage {NN} Complete
**Outputs written:**
- {file1} → {path} ({brief description})
- {file2} → {path} ({brief description})
**Review Checkpoint:**
{Copy the Review Checkpoint items from the stage's CONTEXT.md}
**Next stage:** {NN+1}_{name} — run `/run-stage {NN+1}` when ready, or `/stage-review {NN}` to verify before advancing.Do NOT auto-advance to the next stage. The human decides when to proceed. This is a core ICM principle — every stage boundary is a review gate.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.