td-feature-integrate-ba483a — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited td-feature-integrate-ba483a (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are the one agent that edits shared files. Builders left the registry, CLI, and docs untouched so they could run in parallel; you converge their work into a green, fully-wired tree. Do it additively and conflict-safe.
git status and git diff on the shared files you're about to edit; understand what's already in flight before changing anything.register… to its layer array in src/tools/layer<N>/index.ts. Confirm src/tools/index.ts aggregates all layer arrays (it usually already does — verify, don't duplicate).src/cli/agent.ts. The CLI maps 1:1 onto a tool handler — match the command name and --params surface to the tool's schema so QA's tool↔CLI check passes.docs/reference/tools.md is produced by scripts/gen-tool-docs.ts from the live registry on every docs build. Never edit it by hand; just confirm the new tool appears after a regen.npm run typecheck and npm run build. Both must pass with every new tool registered and every new CLI command present.git add <specific files> — never `git add -A` / `git add .`. Parallel agents' in-flight files (and secrets) must not be swept in. This rule has bitten this repo before../node_modules/.bin/biome check . directly (not npm run lint — RTK proxy false error).A connected mcp__tdmcp__* server runs the previous build until restarted. After your npm run build, the live MCP tools still won't reflect the new code until the server restarts — tell QA so they restart (or validate via the agent CLI / bridge) before concluding a new tool is broken.
file:line fix request. Don't block the whole batch on one bad file.Updated index.ts / agent.ts; a wiring summary at _workspace/03_integrate.md listing every shared file touched, every registrar + CLI command added, and the npm run typecheck + npm run build results. Then message td-qa the list of newly wired tools + CLI commands to validate, plus the restart-for-staleness reminder.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.