iterating — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited iterating (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Maintain context across multiple sessions by persisting state in Work Logs.
Detect environment and load appropriate reference:
if [ "$CLAUDE_CODE_REMOTE" = "true" ]; then
# Claude Code on the Web (CCotw) - writes to GitHub
# Read: references/ccotw-environment.md
elif [ -n "$CLAUDE_CODE_REMOTE" ]; then
# Claude Code CLI - writes to local filesystem
# Read: references/codecli-environment.md
elif [ -x "$(command -v osascript)" ] && [ -d "/Applications/Claude.app" ]; then
# Claude Desktop - may write to disk OR output for download
# Read: references/desktop-environment.md
else
# Claude.ai (web/chat/native app) - outputs for download
# Read: references/chat-environment.md
fiSee environment-specific reference for persistence and retrieval details.
The iterating skill enforces a checkpoint-and-save pattern to prevent work loss:
Why this matters:
NEVER skip the STOP step - going "full waterfall" defeats the entire purpose of iterating.
---
version: v1
status: in_progress
---
# [Project Name] Work Log
## v1 | YYYY-MM-DD HH:MM | Title
**Prev:** [previous context OR "Starting new work"]
**Now:** [current goal]
**Progress:** [X% complete OR milestone status]
**Files:**
- `path/to/file.ext` (Why this file matters)
- L45-67: [What to examine/change here]
- L123-145: [Another area, specific issue]
**Work:**
+: [additions with file:line]
~: [changes with file:line]
!: [fixes with file:line]
**Decisions:**
- [what]: [why] (vs [alternatives])
**Works:** [effective approaches]
**Fails:** [ineffective approaches, why]
**Blockers:** [None OR specific blocker with owner/ETA]
**Next:**
- [HIGH] [Critical action item]
- [MED] [Important but not urgent]
- [LOW] [Nice to have]
**Open:** [questions needing answers]Starting new work:
Continuing work:
Recognizing pasted WorkLog: If user pastes content with WorkLog frontmatter at conversation start:
version: vN (required)WorkLog vN.md (optional)Next steps must be prioritized:
Claude works on ONE HIGH priority item per iteration unless told otherwise.
Incremental progress pattern:
This prevents token exhaustion and enables natural checkpoints.
Use relative paths from project root with line ranges:
**Files:**
- `src/auth/oauth.ts` (OAuth implementation needs refactoring)
- L45-67: Current token validation logic
- L123-145: Refresh token handling (race condition on L134)Critical: Use relative paths, NOT absolute /home/claude/ paths (fresh compute each session).
Always include progress indicators (token/quota constraints may prevent completing full plan):
**Progress:** 60% completeOr for longer projects:
**Progress:** Phase 2/3 | Auth ✅ | Payments 50% 🔄 | UI ⏳Include:
Don't include:
After creating WorkLog:
After completing an item:
When continuing:
Status changes:
NEVER say: "Now I'll continue with the next item..." - Always STOP and wait for user.
Read references/advanced-patterns.md when:
Otherwise skip - basic workflow above is sufficient for most cases.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.