tdmcp-docs-roadmap-update-97b49f — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited tdmcp-docs-roadmap-update-97b49f (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Updates the repo's documentation surfaces after feature waves or releases: docs/ROADMAP.md, high-level docs named by the audit, EN/PT prompt cookbooks, and generated reference docs.
Execution mode: sub-agents. This environment does not use TeamCreate; spawn the role agents defined in .Codex/agents/ and coordinate them from the main session.
Before spawning agents:
git status --short._workspace/docs_release_audit.md,_workspace/roadmap_docs_update.md, _workspace/cookbook_sync_update.md, or _workspace/docs_roadmap_qa.md already exist.
phases;
re-run writers.
Preserve unrelated local changes. Do not reset or revert user edits.
Spawn docs-release-auditor:
Read .Codex/agents/docs-release-auditor.md and execute it.
Audit current local package, CHANGELOG, ROADMAP, README, cookbook docs,
CLI/resource surfaces, generated docs, npm package version, GitHub releases, and
tags. Write _workspace/docs_release_audit.md.The audit is mandatory whenever release wording, tool counts, or "latest" features are involved.
After _workspace/docs_release_audit.md exists, spawn these agents in parallel when their write sets are both needed:
Roadmap/docs editor
Read .Codex/agents/roadmap-docs-editor.md and execute it.
Use _workspace/docs_release_audit.md. Update docs/ROADMAP.md and any high-level
docs named by the audit. Do not edit generated docs or cookbook files. Write
_workspace/roadmap_docs_update.md.Cookbook sync
Read .Codex/agents/docs-cookbook-sync.md and execute it.
Use _workspace/docs_release_audit.md and _workspace/roadmap_docs_update.md if it
exists. Update docs/guide/prompt-cookbook.md and docs/pt/guide/prompt-cookbook.md
for docs-worthy new features, keeping locales in parity. Write
_workspace/cookbook_sync_update.md.If only roadmap docs or only cookbook docs are affected, run only the relevant writer.
Run the docs generation/build gate from the main session:
npm run docs:build
npm run validate:recipes
git diff --checkThen spawn docs-roadmap-qa:
Read .Codex/agents/docs-roadmap-qa.md and execute it.
Use the release audit and writer summaries. Verify release claims, EN/PT parity,
generated docs behavior, VitePress media embeds, and command outcomes. Write
_workspace/docs_roadmap_qa.md.If QA finds narrow issues, fix them in the main session or re-run only the responsible writer.
_workspace/docs_release_audit.md._workspace/roadmap_docs_update.md._workspace/cookbook_sync_update.md._workspace/docs_roadmap_qa.md.HEAD, and planned backlog distinct.docs/reference/tools.md.withBase('/examples/...') for VitePress video embeds.silent broken links.
Normal flow: a new release lands. Audit confirms package/npm/GitHub agree, roadmap is updated with shipped and remaining work, cookbook gets matching EN/PT entries, npm run docs:build, npm run validate:recipes, and git diff --check pass.
Error flow: npm or GitHub release checks fail. Auditor marks release state unverified; writers avoid definitive public-release claims; QA records residual risk and asks for a retry or human release confirmation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.