blueprint — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited blueprint (Agent Skill) and scored it 91/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} is the classic direct prompt-injection phrasing. Placed in a skill body that the agent reads as trusted instructions, it tries to make the agent abandon its prior rules and follow whatever comes next — a full system-prompt override.
ignore/disregard/forget … previous instructions sentence.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
@rules/git/general.mdc — branch, commit, and PR conventions below come from it.@rules/compound-engineering/general.mdc — the plan is durable memory the next agent reuses, not throwaway prose.@rules/compound-engineering/general.mdc Assign the most relevant existing label when creating a tracker issue for any tracker issue this plan creates or hands off to @skills/create-issues-from-text/SKILL.md to create.@rules/laravel/architecture.mdc when the project uses pekral/arch-app-services, so each step lands in the correct layer.@skills/resolve-issue/SKILL.md or a fresh agent with no prior context.gh) is missing.Do not use for single-PR tasks (use @skills/analyze-problem/SKILL.md or @skills/resolve-issue/SKILL.md), for splitting an objective into tracker issues without a dependency graph (use @skills/create-issues-from-text/SKILL.md), or when the user wants one high-leverage suggestion (@skills/smartest-project-addition/SKILL.md / @skills/product-capability/SKILL.md).
Run the five phases in order. Do not register a plan that has not passed Review.
@rules/compound-engineering/general.mdc, find the existing part of the system the work extends before inventing a new abstraction.git log / git blame over the affected area to learn how it evolved and what was already tried or reverted.master), and whether gh is available (gh auth status). Record the result; it drives the PR template in Output.@rules/laravel/architecture.mdc applies.@rules/compound-engineering/general.mdc).@rules/git/general.mdc (wrong type, base branch, period, attribution).gh exists when Research found it absent.docs/plans/<objective-slug>/): one README.md index plus one file per step, or a single plan file when small. State the path so the next agent picks it up.Register a plan index plus one entry per step.
Plan index (README.md): objective in one or two sentences; ordered step list; the parallelism summary; git baseline (default branch master, gh present yes/no).
Per step:
type(scope): short description, lowercase type/scope, no trailing period (@rules/git/general.mdc).master (e.g. feat/<short-slug>).none if it can start immediately.Closes #N) when one exists. Open with gh when available; otherwise output the title and body for the human to open manually and say so.Parallelism summary — the dependency graph (e.g. 1 -> 2 -> 4, 3 parallel to 2) and an explicit list of step sets that may run concurrently because they share no files and no dependency edge.
@rules/git/general.mdc and degrade gracefully when gh is absent.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.