build-phase — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited build-phase (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are entering the Build Phase of the Structured Agentic Development Workflow.
Output style: Check memory for workflow-config:caveman-level. If set, adapt your output brevity to that level while preserving technical accuracy.Execute $ARGUMENTS using the strict phase-wise loop.
You MUST follow this loop for every phase. Do not skip steps. Every step produces output — do not stop after one step.
Use /test-driven-development. This is mandatory for every phase.
You must complete all three steps. Do not stop after writing tests. The tests exist to drive the implementation — writing them is the beginning of the phase, not the end.
uv run pytest tests/ -x (or the project's test command).Review your own changes with a critical eye. This is NOT the full /3p-review — that happens after ALL phases are complete. This is a quick self-review to catch obvious issues before moving on.
Check for:
If you find CRITICAL issues, fix them and re-test before proceeding. For minor concerns, note them — the full /3p-review will catch them after all phases.
Present the self-review findings to the human for confirmation before proceeding.
Report:
Then auto-advance: if the phase is clean and more phases remain, immediately suggest and begin the next phase. Do not wait for the user to say "proceed" unless the plan requires a human decision gate.
If the user tells you that code was written by another agent (Cursor, Copilot, a local model, etc.) or simply says "it's done" / "I've implemented Phase N" / pastes a diff:
The user should not have to tell you to continue the workflow. You own the process from the moment they hand you back control.
When all phases in the plan are complete:
uv run pytest tests/ -x. All tests must pass.This skill ends here. Building is one responsibility — review and handoff are owned by the orchestrating workflow, not by this skill. Do not run /3p-review, write the handoff summary, or verify from inside build-phase.
agentic-workflow (main model) drives /3p-review → /handoff-summary → /verification-before-completion.build-model (dedicated build model) drives /3p-review → /handoff-summary → STOP.Whichever launched you takes over once you report completion. You do not need to decide which — just report and hand back.
If more phases remain, auto-advance: suggest and begin /build-phase <plan-file> Phase N+1.
When all phases are complete, present the build completion report and return control to the orchestrating workflow. That workflow drives review and handoff next — do not start them yourself.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.