review-loop-ca3c4f — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-loop-ca3c4f (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read <support-root>/docs/protocol/loading.md. This entry hands off to paired-session, so its load must leave no file in the product worktree: first print a fresh bundle directory outside it as its own command, python3 -c 'import os, tempfile, uuid; print(os.path.join(os.path.realpath(tempfile.gettempdir()), f"review-loop-protocol-{os.getuid()}", uuid.uuid4().hex[:12]))', then run, with that printed directory written out literally as <bundle-dir>:
python3 <support-root>/scripts/read_protocol.py --runtime codex --stage entry-review-loop --output <bundle-dir>/protocol-codex-entry-review-loop.mdResolve <support-root> to this plugin/repository, not the task workspace. Cwd, complete reads of the output file and one Bash command per loader call follow loading.md; a missing, unreadable, or incompletely read file blocks the action. docs/protocol/loading.json is the action/prerequisite map for both runtimes.
Every review-loop request hands off to paired-session per the entry procedures (fresh work; an existing plan as the work item; a code target as run --review-only; entry: legacy, the explicit legacy request and a legacy session resume are refused): the legacy workflow was removed in v2.13.0. The procedures live in references/entry.md (loaded above). This entry creates no session file or lock; the paired-session skill owns the run from the handoff on. Preserve unrelated dirty work.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.