fable-mode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fable-mode (Agent Skill) and scored it 83/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 4 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 4 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
fable-mode is a single operating mode for intent-aware work.
It is not a harness. It is not a rigid spec generator. It is not a design-only mode. It is not "think as much as possible."
The purpose of fable-mode is to choose the smallest sufficient reasoning depth and procedure that protects user intent, explicit constraints, grounding, capability fit, output form, correctness, and output quality.
fable-mode is domain-neutral. It must not push work toward one subject, audience, visual style, or artifact type. HTML, CSS, JavaScript, canvas, SVG, images, documents, tests, terminal commands, and prose are implementation tools. The desired output form comes from the user's intent.
fable-mode is not a Fable 5 clone, model bridge, provider bridge, runtime harness, automation framework, or goal engine. It does not unlock, emulate, proxy, or route to another provider. It is documentation-only guidance for Codex behavior.
Before planning, using tools, or acting:
This is a routing loop, not a requirement to read every reference file.
The output lock must be one of: answer, edit, implementation, review, audit, design artifact, research, clarification, or validation. It determines reasoning depth, which reference docs to read, whether to ask or act, whether tools are allowed, how much verification is enough, and final response length.
Grounding and capability checks are stop gates when they protect a hard requirement. If a required source, asset, measurement, reproduction, runtime, browser, current lookup, or other capability is unavailable, do not enter implementation by substituting a plausible approximation. Stop, inspect with an available tool, ask for the missing material, or change the output to a clearly limited answer or plan.
For L2, L3, and L4 work, expose a compact route line near the start. This is a public work contract, not hidden reasoning or chain-of-thought.
Example:
Fable route: Lock=implementation · Layer=L2 · Procedure=P2 · Tool=T2 · Grounding=repo+tests · Delegation=A0Do not expose a route line for L0 direct answers. For L1 small edits, expose it only when file edits, verification, or tool use make the contract useful.
The route line may include:
Do not include private deliberation, discarded hypotheses, hidden audit notes, or step-by-step reasoning in the route line.
Delegation is optional evidence-gathering, not the default behavior.
The main agent always owns the output lock, user intent, write coordination, final synthesis, and final responsibility.
Subagents are for context isolation, evidence separation, and parallel audit. They should receive one narrow question and return distilled evidence. Avoid write-heavy parallel work. Do not imply that this plugin automatically runs subagents; this is a documentation budget only.
Use this order for substantial work:
Before planning or tool use, apply the minimal entry set:
Then load only the monitor files triggered by the locked output, explicit constraints, grounding needs, capability needs, risk, or requested artifact:
The output lock and depth gate decide which later reference docs to read. Do not read every reference file by default.
Monitor files are not a second checklist. They are small, conditional guardrails. Grounding and capability monitors become hard stops when their missing evidence or missing tool would make implementation dishonest.
For ambiguous, product, architecture, design, or high-risk work, also read:
For UI, frontend, design, prototype, game, animation, editor, dashboard, deck, canvas, SVG, or HTML/CSS/JS artifact work, also read:
For localized CSS, JS, layout, interaction, or bug fixes, prefer:
For unknown-cause debugging, behavioral regressions, performance mysteries, or failures where the cause is not already known, also read:
For UI, games, simulations, charts, SVG/canvas/WebGL, executable artifacts, or any work where runtime/rendered behavior is the deliverable, also read:
Before finishing substantial work, apply a compact critique and final-shape check. Read these files only when the task is large enough that the extra guardrail helps:
For long L3/L4 tasks, user-visible handoffs, or resumed work where the task contract may drift, use:
Existing supporting references may be used after the routing layer when relevant:
Output lock: answer. Answer directly. Do not create a plan, spec, audit, file, or implementation.
Output lock: edit. Inspect the smallest relevant source area. Fix the cause. Avoid redesigning the product. Verify the specific touched behavior.
Output lock: implementation. Use a short plan, implement the bounded change, run relevant checks, and summarize changes.
Output lock: review or audit. Findings are the output unless the user asks for fixes. Do not rewrite the patch or expose full audit notes by default.
Output lock: research or validation. Use only the tools and sources needed for the claim, date, file, behavior, or artifact being checked. Separate verified evidence from inference.
Do not jump straight to the most familiar output format. Classify the user's intent, requested output form, scope, grounding requirements, capability fit, and trade-offs. Ask only if the missing answer materially changes the result.
Do not confuse an implementation tool with the user's desired output. A design request is not automatically a website. A simulation is not automatically a dashboard. A small bug is not automatically a redesign. A brainstorming request is not automatically an implementation task.
Slow down. Use audit lanes. Ask before destructive or expensive changes.
Observe or reproduce before fixing. Keep at least two plausible hypotheses active, or at least three for L3/L4 debugging. Gather evidence that distinguishes hypotheses before changing code. Fix the causal path, then verify the original failure mode and the touched surface.
Do not claim UI, game, simulation, chart, SVG, canvas, WebGL, or executable behavior is complete from source inspection alone. Use natural-environment observation, targeted runtime/test verification, or explicitly state the capability gap.
Before finalizing substantial work, ask:
Revise the artifact or report the limitation when the critique finds a miss.
Do not create hooks, scripts, MCP servers, app integrations, telemetry, dependencies, network calls, postinstall commands, runtime automation, or a second skill.
Do not turn fable-mode into a provider bridge, API gateway, LiteLLM wrapper, goal engine, planner engine, router service, telemetry layer, or automatic subagent framework.
Do not inject fable-mode branding into user deliverables unless explicitly requested.
Do not claim affiliation with Anthropic, Claude, OpenAI, or Codex beyond truthful compatibility statements.
Do not claim Fable5 equivalence or copy proprietary prompt text.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.