grace-cli-7fb8f3 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited grace-cli-7fb8f3 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the optional grace CLI as a fast GRACE-aware read/query layer.
grace binary must be installed and available on PATH--path <project-root> unless you are already in the project rootIf the CLI is missing, or the repository is not a GRACE project, say so and fall back to reading the relevant docs and code directly.
grace lint --path <project-root>Use for a fast integrity snapshot across semantic markup, XML artifacts, and export/map drift.
grace lint --profile autonomous --path <project-root>Use before long agent runs to verify that operational packets, verification entries, and observable evidence are strong enough for autonomous execution.
grace lint --explain <code>Use when a lint code appears in CI or review and you want the built-in explanation plus remediation guidance.
grace status --path <project-root>Use for a one-shot health report: artifact presence, codebase metrics, integrity snapshot, autonomy gate, recent changes, and the next safe action.
grace status --with modules --path <project-root>Use when you also want per-module health summaries in the same report.
grace module find <query> --path <project-root>Use to resolve module IDs from names, paths, dependencies, annotations, verification refs, or file-local LINKS.
grace module show <id-or-path> --path <project-root>Use to read the shared/public module view from development-plan.xml, knowledge-graph.xml, implementation steps, and linked files.
grace module show <id> --with verification --path <project-root>Use when you also need the module's verification excerpt.
grace module health <id-or-path> --path <project-root>Use for one module's implementation coverage, verification health, autonomy readiness, blockers, and next action.
grace verification find <query> --path <project-root>Use to search verification entries by ID, module, priority, scenarios, test files, log markers, or commands.
grace verification show <V-M-id-or-module> --path <project-root>Use to read one verification entry with its linked module context.
grace file show <path> --path <project-root>Use to read file-local/private MODULE_CONTRACT, MODULE_MAP, and CHANGE_SUMMARY.
grace file show <path> --contracts --blocks --path <project-root>Use when you also need function/type contracts and semantic block navigation.
Use grep or exact-text search first when the target is still broad, then use the CLI for the narrowed shared/public and file-local/private views.
Canonical anchors to search for when narrowing scope:
M- for module IDsV-M- for verification IDsCrossLink for graph edgesSTART_MODULE_CONTRACTSTART_MODULE_MAPSTART_CONTRACT:START_BLOCK_START_CHANGE_SUMMARYLINKS:Copy-paste grep recipes:
grep -R -n -E '\bM-[A-Z0-9]+(-[A-Z0-9]+)*\b' docs/development-plan.xml docs/knowledge-graph.xml
grep -R -n -E '\bV-M-[A-Z0-9]+(-[A-Z0-9]+)*\b' docs/verification-plan.xml docs/knowledge-graph.xml
grep -R -n 'LINKS:' src tests
grep -R -n 'START_MODULE_CONTRACT\|START_MODULE_MAP\|START_CHANGE_SUMMARY' src tests
grep -R -n 'START_CONTRACT:\|START_BLOCK_' src tests
grep -R -n 'M-XXX' docs src tests
grep -R -n 'V-M-XXX\|M-XXX' docs src testsNormalization rules:
M-<UPPER-KEBAB> formV-M-<UPPER-KEBAB> formgrace status when you first need to understand the current project state.grace status --with modules when project-level health is not enough and you need module summaries.grace lint when integrity or drift matters.grace lint --profile autonomous before long autonomous execution.grace lint --explain <code> when one issue needs targeted remediation guidance.grace module find to resolve the target module from the user's words, a stack trace, or a changed path.grace module show, grace module health, and grace verification show for the narrowed shared/public truth.grace file show for the file-local/private truth.--json when another tool, script, or agent step needs machine-readable output.--fail-on warnings or --fail-on errors when the CLI output should gate CI.grace module show is for shared/public module context.grace file show is for file-local/private implementation context.grace-* skill after using the CLI to narrow scope.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.