verify-intent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited verify-intent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<what-to-do>
Load the active intent. If PATHMODE_API_KEY is set, call get_current_intent. Otherwise read intent.md from the project root.
Walk the user through the five verification dimensions below. Ask ONE question at a time. For each question, propose your best-guess answer based on the intent's outcomes and what's visible in the codebase (existing tests, observability hooks, CI config).
The five dimensions:
For each answer, capture it. In team mode, call log_implementation_note with the dimension and answer (e.g., verification:fastest_check: npm run typecheck). In local mode, append to the ## Verification section of intent.md.
When all five are answered, summarize the loop:
Verification loop for this intent:
- Fastest: [command/check]
- Highest-confidence: [command/check]
- Manual fallback: [steps]
- Shipped signal: [metric/log]
- Must not regress: [named cases]</what-to-do>
<supporting-info>
A verification field that says "add tests" is a document, not a contract. It doesn't tell an implementation agent what to actually run, and it doesn't tell a reviewer what to check.
The five-dimension breakdown turns verification into something runnable:
Intent: "Payment completes in under 3 seconds (p95)"
Bad verification: "Add a test for the payment timeout."
Good verification (five dimensions):
pnpm vitest run payment-timeout.test.ts — 2s, runs locally on savepnpm playwright test payment-flow.spec.ts — 30s, hits the actual payment provider sandbox/checkout, add a $1 item, complete payment, time the wall clock from "pay" click to confirmation screencheckout.payment.duration.p95 < 3000ms over 24h after deployThe first version is a wish. The second version is a contract.
log_implementation_note keyed by dimension. When the verification schema lands in the spec model (planned), these notes will migrate to a structured verification field. Until then, notes are the durable store.## Verification in intent.md as a markdown section. Simple, no schema dependency.compile-intent produces a spec, run verify-intent before treating the spec as agent-ready. A spec without a verification loop is not agent-ready.handoff-intent, check that the verification loop ran — if outcomes are claimed delivered but verification was never designed, that's a gap to surface.review-against-intent consumes the verification field to know what "delivered" means.</supporting-info>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.