project-config-and-tests — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited project-config-and-tests (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This is a composable project overlay, not a standalone implementation workflow. Use it with matching language or discipline guidance when the main task is a configuration contract or deterministic tests at that boundary.
For review, inspect these contracts and report findings without editing config, tests, or process state. For implementation, apply only the requested changes and use isolated fixtures for validation.
The task involves configuration sources or precedence, defaults, parsing, normalization, path resolution, or deterministic tests around those seams.
Do not use this for general feature work (use the matching principle skill and add project-core-dev only when repository-specific completion evidence is not concrete), general test strategy (tester-mindset), framework-specific test implementation, vendored dependency changes (project-vendor-boundary), release-only work (project-release-maintainer), or environment diagnosis whose cause has not been isolated (project-platform-diagnose).
the behavior of missing, empty, malformed, and unsupported values.
without valid config. Fail fast or fail closed when continuing would be unsafe or would silently apply misleading behavior.
process-global lookup when the existing design permits it.
wall-clock time, and shared filesystem state. Use the repo's fixtures and temporary-directory helpers, and clean up any remaining state.
relative, absolute, and platform-sensitive path cases that belong to the supported contract. Do not simulate unsupported platforms and present the result as observed evidence.
printing secret values in diagnostics or test output.
any selected principle skill.
percentage coverage or routine benchmarking the objective.
dependence on ambient state.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.