onescience-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited onescience-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
你负责把工作流层或角色层结论路由到合适的执行技能,不要无条件拉起完整流水线。
当你需要判断最小技能链、组合链路、关键词映射或常见误路由时,读取 ./references/routing_matrix.md。 当你需要判断跨执行链路的共享 backend 与执行模式语义时,读取 ../../references/shared_contracts.md。 当你需要消费 OneScience 仓库内 examples/biosciences 资产时,读取 ./assets/onescience_dependency.json,并以 {onescience_path}/onescience/examples/biosciences/_manifests/contract.json 为能力契约来源。 当你需要判断 Catalog 原语 resolve 结果如何进入执行链时,读取 ../../references/catalog_integration.md。 当你需要处理“未配置远程环境”或“远程描述模糊”的异常场景时,读取 ../../references/remote_fallback.md。 当你需要按统一格式输出远程异常状态时,读取 ../../references/remote_status_template.md。 当你需要参考最终异常回复示例时,读取 ../../references/remote_status_examples.md。
selectedPrimitiveIds 或 primitive_contract 已在上游给出,执行层直接消费,不重复 catalog_search(kind=primitive)。catalog_search(kind=primitive) → catalog_resolve,再进入 onescience-coder / onescience-runtime。<available_skills>;名单不足时再 catalog_search(kind=skill),确定后用 skill tool 加载。onescience-workflow。onescience-role。onescience-paper-reproonescience-coderonescience-runtimeonescience-installeronescience-runtime。onescience-installer。onescience-runtime 内部承担 discover/preflight/execute/diagnose,onescience-installer 内部承担 discover/precheck/install/verify,不要再向外拆出额外执行 skill。user_intent / detected_domain / workflow_handoff,优先消费工作流层结论。current_role / role_chain / handoff_artifacts / execution_entry,优先消费角色层结论。execution_entry 和 handoff_artifacts 为直接路由依据;不要反向重做领域识别或角色链判断。./references/routing_matrix.md。onescience-coder -> onescience-runtime 编排;由 runtime 内部做 discover/preflight。onescience-coder -> onescience-runtime 编排;此时默认把 runtime 视为本地 local 执行模式的统一验证入口,不要把"生成验证脚本"误判为"已经完成验证运行"。onescience-coder -> onescience-runtime 编排,并传递 execution_mode=remote_direct、access_mode=cloud_api,必要时再补 execution_channel=scnet_mcp。onescience-paper-repro:execution_entry=onescience-paper-reprotask_method=paper2codedomain_task_family=paper-reproductionpaper_source 且明确标注为论文复现任务execution_entry=onescience-coder,只要同时包含 task_method=paper2code 或 domain_task_family=paper-reproduction,也应先进入 onescience-paper-reproonescience-paper-repro 负责论文获取、解析、复现规格抽取和完整任务描述生成,再交给 onescience-coder。paper2code 的默认交付是代码与 notebook 生成,不自动进入 runtime/installer;如果用户同时要求运行验证生成的代码,才按标准规则追加 onescience-runtime。
onescience-paper-repro -> onescience-coder -> onescience-runtime;向 onescience-coder 传递 required_chain=[onescience-coder, onescience-runtime]、final_execution_skill=onescience-runtime、chain_continuation_required=true。onescience-coder -> onescience-runtime),向 onescience-coder 显式传递 required_chain=[onescience-coder, onescience-runtime]、final_execution_skill=onescience-runtime。chain_continuation_required=true,避免 coder 把代码完成误判为任务结束。onescience-installer,不要提前把安装链路和运行链路混在一起。runtime / installer 前显式说明当前 backend 是 stable_backend、planned_backend 还是 unsupported_for_now。在调用下游技能前,整理并传递这些信息:
task_idexecution_mode / access_mode,以及可选的 execution_channelbackend_id、是否 stable、是否 planned、是否当前不支持paper_source、真实 domain_route、mode、framework、output_dir、implementation_code_used=falsepaper_repro_handoff=true、task_description_path、task_description_content、paper_workdir、coder_reference_mode=assets_only;reproduction_spec.md 只作为用户审计产物保留,不作为 coder 编码输入required_chain、final_execution_skill,必要时再传 chain_continuation_required=trueonescience.jsontpl.slurmsubmission_authorized=true 与 authorization_scope=current_workflowonescience.json:仅阻塞 remote_slurm 运行链路;不要阻塞纯代码链路。tpl.slurm:运行链路中由 onescience-runtime 使用内置模板兜底。onescience-runtime 的 scnet_mcp 资产自行发现。onescience-runtime 的 discover/preflight,必要时再显式回退环境识别阶段。至少给出:
如果请求涉及远程环境缺失、远程描述模糊或运行前置条件不足,再额外给出:
status:ok / partial_context / need_clarification / blockedrecognized:已识别出的 Host / 平台 / 队列 / 路径等线索missing:当前阶段真正缺失的字段can_continue_locally:是否还能停留在本地或代码阶段继续next_action:下一步进入 coder / runtime / installer如果请求已可识别远程 backend,再额外给出:
backend_idbackend_statusexecution_readinessonescience-workflow 做顶层工作流理解。onescience-role 做完整角色分工抽象。remote_slurm。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.