Is feature-flag-debt-audit-1bf45f safe to install?

SaferSkills independently audited feature-flag-debt-audit-1bf45f (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/feature-flag-debt-audit/SKILL.md · 1 file

.claude/skills/feature-flag-debt-audit/SKILL.md1.7 KB · Markdown

name: feature-flag-debt-audit

description: Audit stale feature flags, launch toggles, kill switches, and experiment gates from a flag export plus source tree. Use when a team needs to find expired or unreferenced flags, prevent risky deletes, assign owners, and produce a cleanup plan that is safer than asking an agent to guess from code snippets.

Feature Flag Debt Audit

Use this skill to turn feature-flag debt into an owner-ready cleanup plan. The skill can run the repository scanner at feature-flag-debt-audit/scripts/feature_flag_debt_audit.py and then apply the guardrails from feature-flag-debt-audit/references/cleanup-rules.md.

Inputs

Flag export as CSV or JSON.
Repository path to scan.
Stale policy in days.
Owner and rollout constraints when known.

Workflow

Preserve flag metadata, owner, status, type, last-seen date, expiry, and code references.
Run the local scanner when files are available.
Classify each flag as delete_candidate, owner_review, instrument_first, or keep_permanent.
Refuse broad deletion plans without owner approval, production-state evidence, references, tests, and rollback instructions.
Return a Markdown cleanup report with guardrails, code references, cleanup tickets, and verification steps.

Command

python3 feature-flag-debt-audit/scripts/feature_flag_debt_audit.py \
  --flags feature-flag-debt-audit/scripts/fixtures/flags.csv \
  --code-dir feature-flag-debt-audit/scripts/fixtures/sample_app \
  --stale-days 90 \
  --today 2026-05-12

Expected output includes Flag Debt Decision, at least one delete_candidate, at least one keep_permanent, and reference counts.

feature-flag-debt-audit-1bf45f— agent skill

Is feature-flag-debt-audit-1bf45f safe to install?

Feature Flag Debt Audit

Inputs

Workflow

Command

Audit the pieces. Scan the whole. Decide.