orbiads-admin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited orbiads-admin (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- ⚠️ DO NOT EDIT — generated by scripts/generate_skills/generate.py Regenerate: python scripts/generate_skills/generate.py --write -->
_Manage global settings, naming conventions, delivery defaults, network configurations, and custom presets._
Mode: mixed (read + write) · Tools Included: 5 · Total Actions: 70
orbiads:gam_admin (Epic 65)_GAM admin orchestration — single entry point for 48 ops over 7 areas._
backend/src/mcp/tools/gam_admin.py:163| Action | Cost | Write? | Confirmation token |
|---|---|---|---|
applications.create | 0 | yes | — |
applications.patch | 0 | yes | — |
custom_fields.create | 0 | yes | — |
custom_fields.patch | 0 | yes | — |
entity_signals.create | 0 | yes | — |
entity_signals.patch | 0 | yes | — |
labels.create | 0 | yes | — |
labels.patch | 0 | yes | — |
sites.create | 0 | yes | — |
sites.patch | 0 | yes | — |
teams.create | 0 | yes | — |
teams.patch | 0 | yes | — |
applications.batch_archive | 0 | — | — |
applications.batch_create | 0 | — | — |
applications.batch_unarchive | 0 | — | — |
applications.batch_update | 0 | — | — |
applications.get | 0 | — | — |
applications.list | 0 | — | — |
custom_fields.batch_activate | 0 | — | — |
custom_fields.batch_create | 0 | — | — |
custom_fields.batch_deactivate | 0 | — | — |
custom_fields.batch_update | 0 | — | — |
custom_fields.get | 0 | — | — |
custom_fields.list | 0 | — | — |
entity_signals.batch_create | 0 | — | — |
entity_signals.batch_update | 0 | — | — |
entity_signals.get | 0 | — | — |
entity_signals.list | 0 | — | — |
labels.batch_activate | 0 | — | — |
labels.batch_create | 0 | — | — |
labels.batch_deactivate | 0 | — | — |
labels.batch_update | 0 | — | — |
labels.get | 0 | — | — |
labels.list | 0 | — | — |
sites.batch_create | 0 | — | — |
sites.batch_deactivate | 0 | — | — |
sites.batch_submit_for_approval | 0 | — | — |
sites.batch_update | 0 | — | — |
sites.get | 0 | — | — |
sites.list | 0 | — | — |
teams.batch_activate | 0 | — | — |
teams.batch_create | 0 | — | — |
teams.batch_deactivate | 0 | — | — |
teams.batch_update | 0 | — | — |
teams.get | 0 | — | — |
teams.list | 0 | — | — |
users.get_roles | 0 | — | — |
users.list | 0 | — | — |
orbiads:gam_features (Epic 68.5)_Parent gam_features tool for the Epic 68.5 catalogue refactor batch._
backend/src/mcp/tools/gam_features.py:115Legacy wrappers: 3 pre-refactor child tool(s) still route to this parent. See ../../_docs/legacy-tool-mapping.md.| Action | Cost | Write? | Confirmation token |
|---|---|---|---|
get_gam_features | 0 | — | — |
probe_gam_features | 0.5 | — | — |
refresh_gam_features | 0 | — | — |
orbiads:network (Epic 68.5)_Parent network tool for the Epic 68.5 catalogue refactor batch._
backend/src/mcp/tools/network.py:236Legacy wrappers: 4 pre-refactor child tool(s) still route to this parent. See ../../_docs/legacy-tool-mapping.md.| Action | Cost | Write? | Confirmation token |
|---|---|---|---|
set_preview_url_library | 0 | yes | — |
update_network | 0 | yes | — |
get_network_info | 0 | — | — |
get_preview_url_library | 0 | — | — |
list_accessible_networks | 0 | — | — |
switch_network | 0 | — | — |
orbiads:settings (Epic 68.1)_Parent settings tool for the Epic 68.1 catalogue refactor POC._
backend/src/mcp/tools/settings.py:314Legacy wrappers: 9 pre-refactor child tool(s) still route to this parent. See ../../_docs/legacy-tool-mapping.md.| Action | Cost | Write? | Confirmation token |
|---|---|---|---|
create_preset | 0 | yes | — |
delete_preset | 0 | yes | — |
update_delivery_defaults | 0 | yes | — |
update_naming_conventions | 0 | yes | — |
update_tenant_settings | 0 | yes | — |
get_delivery_defaults | 0 | — | — |
get_naming_conventions | 0 | — | — |
get_tenant_settings | 0 | — | — |
list_presets | 0 | — | — |
orbiads:tenant_catalog (Epic 78.1)_Parent tenant_catalog MCP tool — scan + read tenant inventory catalog (Story 78.1)._
backend/src/mcp/tools/tenant_catalog.py:133| Action | Cost | Write? | Confirmation token |
|---|---|---|---|
refresh | 1 | yes | required |
scan_network | 1 | yes | required |
get_active_catalog | 0 | — | — |
get_scan_status | 0 | — | — |
Every write follows the preview → confirm → execute pattern enforced by billing_guard + confirmation_token (SHA-256 over the payload, 5-minute TTL):
dry_run=true (or without confirmation_token) — server returns the preview + token + estimated cost.confirmation_token=<from step 1>. Server validates token freshness + payload SHA match.Token drift (any payload field changed between preview and execute) returns IDEMPOTENCY_KEY_MISMATCH. Refresh by re-running step 1.
This sub-skill is user-invokable: false. The orbiads orchestrator (../orbiads/SKILL.md) routes intents to these tools based on its Quick Reference table. If you load this file directly, you bypass the orchestrator's context intake — re-route through the orchestrator unless you already know exactly which action to call.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.