validate-pipeline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited validate-pipeline (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Walks the full contract chain of an ICM pipeline and validates that stages connect correctly. Finds broken handoffs, mixed reference/working files, and structural anti-patterns.
Use this skill when:
/pipeline-scaffold and wants to verify the result/run-stage execution failed because of missing inputsFind all numbered stage folders:
ls -d [0-9][0-9]_*/ 2>/dev/null || ls -d stages/[0-9][0-9]_*/ 2>/dev/nullSort by numeric prefix. If no stages found, halt: "No pipeline stages found. This skill validates ICM pipelines with numbered stage folders (01_name/, 02_name/, etc.)."
Record:
_config/ or shared/ directories existFor each stage, read its CONTEXT.md. Parse and record:
Flag any stage missing a CONTEXT.md entirely.
For each consecutive pair of stages (N, N+1):
3a: Output-to-Input matching
output/: verify that stage N's Outputs table declares that file.{file} from stage {N}, but stage {N} doesn't declare it as an output."3b: Name consistency
research_notes.md but stage {N+1} expects research-notes.md."3c: Format compatibility
Record results per handoff: Pass (all inputs satisfied), Warning (near-misses), or Fail (missing outputs).
4a: Directory structure
references/ directory (or equivalent for Layer 3)?output/ directory (for Layer 4)?_config/ exist at the pipeline root for shared reference material?4b: Layer labeling
4c: No cross-contamination
references/, _config/) free of per-run output?output/) free of stable configuration?references/ folder? (This should never happen.)| # | Anti-Pattern | How to detect |
|---|---|---|
| 1 | Monolithic stage | One stage has 8+ Process instructions or produces 5+ output files |
| 2 | Missing output folders | Stage folder has no output/ directory |
| 3 | Mixed reference and working | references/ contains dated/versioned files, or output/ contains style guides |
| 4 | No Inputs table | Stage CONTEXT.md has Process and Outputs but no Inputs table |
| 5 | Forward dependency | Stage N reads from stage N+2 or later (skips the chain) |
| 6 | Over-staged | 3+ consecutive stages with only 1-2 Process instructions each |
# Pipeline Validation: {Pipeline Name}
**Date:** {today}
**Path:** {pipeline root}
**Stages:** {count}
## Chain Validation
| Handoff | From | To | Status |
|---------|------|----|--------|
| 1 | 01_{name} | 02_{name} | [Pass/Warning/Fail] |
| 2 | 02_{name} | 03_{name} | [Pass/Warning/Fail] |
| ... | ... | ... | ... |
### Broken Handoffs
{List each with: what's missing, which file, suggested fix}
### Near-Misses
{List each with: the name mismatch and suggested correction}
## Factory/Product Separation
| Check | Status |
|-------|--------|
| Stage `references/` directories | [Present/Missing] |
| Stage `output/` directories | [Present/Missing] |
| Root `_config/` directory | [Present/Missing] |
| Inputs tables have Layer column | [Yes/Partial/No] |
| No cross-contamination | [Clean/Issues found] |
## Anti-Patterns Found
{List each found with a one-line fix, or "None found" if clean}
## Contract Completeness
| Stage | CONTEXT.md | Inputs | Process | Outputs | Checkpoint |
|-------|-----------|--------|---------|---------|------------|
| 01_{name} | [Yes/No] | [Yes/No] | [Yes/No] | [Yes/No] | [Yes/No] |
| ... | ... | ... | ... | ... | ... |
## Suggested Fixes
1. {Most critical fix — what to change and in which file}
2. {Second fix}
3. {Third fix}For each broken handoff or missing contract section, offer to apply the fix directly:
Always ask before modifying any CONTEXT.md file.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.