grace-execute-d0475d — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited grace-execute-d0475d (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<skill> <preflight> Require one active bundle with approved, identity-matched spec.xml and plan.xml. Approved plans are immutable. Read context, projections, assertions, scopes, task dependencies, and verification before editing. Reject phase-incompatible plans before writes: MustPassCommand must be leaf project evidence, and neither target assertions nor post-write task verification may invoke --assertions current or nest GRACE lifecycle commands. Supersede and replan instead of editing an approved conflict in place. </preflight>
<assertion_commands>
grace lint --path PROJECT --assertions currentgrace lint --path PROJECT --change C-ID --assertions baseline (add --run-commands when the baseline declares MustPassCommand)grace lint --path PROJECT --change C-ID --assertions targetgrace lint --path PROJECT --change C-ID --assertions target --run-commandsgrace lint --path PROJECT --change C-ID --assertions final (add --run-commands when the target declares MustPassCommand)grace lint --path PROJECT --parallel-preflight</assertion_commands>
<mode_selection> Wait for explicit sequential or parallel-safe choice. Parallel-safe requires the explicit preflight to pass. Workers never mutate approved plans; durable .grace changes are applied centrally after observed work verifies. </mode_selection>
<recovery_decision_table> | state | required action | | clean-to-start | Run selected baseline, then execute tasks. | | partial-observed-writes | Inspect the declared observed scope and ask whether to resume or revert. | | durable-state-changed | Hard stop; supersede and replan. Approved assertions are immutable. | | target-already-satisfied | Run final end-state validation, opted-in command evidence when declared, durable reconciliation, and ask for explicit apply confirmation. | | unsafe-unknown-drift | Hard stop and report unexplained files. | </recovery_decision_table>
<execution_rules>
--run-commands when its assertions declare MustPassCommand.--assertions final as the outermost lifecycle gate, including --run-commands when MustPassCommand is declared. Final mode performs full project lint, evaluates the selected target, keeps unrelated approved baselines active, and does not re-evaluate the selected plan's superseded baseline.applied and archive the complete bundle.</execution_rules> </skill>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.