its-rest — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited its-rest (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill covers creating and editing the openEHR REST API specification sources in the specifications-ITS-REST repository. Unlike other specifications-XX repos that use AsciiDoc, ITS-REST uses OpenAPI 3.0.3 YAML with Markdown descriptions, split across many small files that are bundled into publishable artifacts.
Exception: Thedocs/directory contains some AsciiDoc-based specs (e.g.,simplified_formats,smart_app_launch) that follow the standard openEHR authoring conventions. This skill does NOT cover those — use theauthoringskill instead.
references/file-formats.md for the detailed format andconventions of each source type — top-level entry YAML, operation files, schema files, Markdown description files, and the HTML amendment record. Load it when writing or editing any of these.
references/build-pipeline.md for the full Redocly + PHP pipeline,validation, live preview, and code generation.
specifications-ITS-REST/
├── specifications/ # Source OpenAPI specs (authoring)
│ ├── overview.openapi.yaml # Top-level entry: overview/cross-cutting concerns
│ ├── ehr.openapi.yaml # Top-level entry: EHR API
│ ├── query.openapi.yaml # Top-level entry: Query API
│ ├── definition.openapi.yaml # Top-level entry: Definition API
│ ├── demographic.openapi.yaml # Top-level entry: Demographic API
│ ├── system.openapi.yaml # Top-level entry: System API
│ ├── admin.openapi.yaml # Top-level entry: Admin API
│ ├── operations/ # One YAML file per API operation
│ ├── schemas/<domain>/ # Reusable schema components (ehr, query, common, …)
│ ├── parameters/{path,query,header}/ # Reusable parameter definitions
│ ├── responses/ # Reusable response definitions
│ ├── headers/ # Reusable response header definitions
│ ├── docs/<domain>/ # Markdown description files (overview, ehr, query, …)
│ └── tags/ # Tag description files (schema docs)
├── computable/OAS/ # Build output (bundled specs in JSON/YAML)
├── docs/ # AsciiDoc specs AND rendered HTML output
│ ├── simplified_formats/ # AsciiDoc spec (use authoring skill)
│ ├── smart_app_launch/ # AsciiDoc spec (use authoring skill)
│ └── *.html # Rendered HTML (build output)
├── development/ # Build tooling (PHP, Docker, Makefile)
├── manifest.json # Component manifest
├── Makefile # Top-level build targets
└── .redocly.yaml # Redocly configurationEach source type has its own format and conventions — detailed in references/file-formats.md:
| Source | Location | Holds |
|---|---|---|
| Top-level entry | specifications/<domain>.openapi.yaml | info/x-status/x-spec, servers, paths wiring operations via $ref |
| Operation | specifications/operations/<resource>_<action>.yaml | operationId, summary, tags, params, requestBody, responses (all $ref) |
| Schema | specifications/schemas/<domain>/<SchemaName>.yaml | PascalCase title = RM class name, properties, $refs |
| Markdown description | specifications/docs/<domain>/Description.md | RFC 2119 prose, hardcoded spec URLs, http/json code examples |
| Amendment record | specifications/docs/overview/Amendment_record.md | HTML table, SPECITS Jira links (not AsciiDoc) |
Quick reference from the development/ directory (full details in references/build-pipeline.md):
make bundle SPEC=ehr # Bundle a single spec
make validate SPEC=ehr # Validate
make all # Bundle all specsspecifications/operations/<operation_id>.yamlspecifications/parameters/ if new ones are neededspecifications/responses/ if new ones are neededspecifications/schemas/<domain>/*.openapi.yaml under paths:specifications/docs/overview/Amendment_record.mdcd development && make bundle SPEC=<spec> && make validate SPEC=<spec>specifications/schemas/<domain>/<SchemaName>.yaml$reftitle matching the RM class namerequired, type, properties, and descriptionspecifications-ITS-REST/specifications/specifications-ITS-REST/docs/ (simplified_formats, smart_app_launch) — use authoring for thosedevelopment/ — consult .junie/guidelines.md for thatspecifications-XX repositories~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.