context-quality-gate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited context-quality-gate (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill gates context file publication behind quality thresholds. When loaded in CI/CD:
Run skills-ref validate on each changed SKILL.md. Block the pipeline if any structural errors are found. This ensures YAML frontmatter, required fields, and format compliance before any semantic evaluation occurs.
Verify that evals/workspace/struct-validation.json has "status": "pass". If "status": "fail", fail the gate with a summary of structural errors.
Read trigger results from evals/workspace/trigger-results/opencode.json and evals/workspace/trigger-results/gemini.json. Confirm:
Read evals/workspace/quality-results/iteration-1/benchmark.json and verify:
Read evals/workspace/selected.json and verify:
selected is not null).The composite score combines pass rate (0.5 weight), trigger rate (0.3 weight), and token efficiency delta (0.2 weight). A composite below 0.5 indicates the skill is not production-ready.
Using write_file, post a PR comment with a Markdown table showing results for each evaluated skill. Source data from evals/workspace/selected.json, evals/workspace/quality-results/iteration-1/benchmark.json, and evals/workspace/trigger-aggregation.json.
| Skill | Structural | Trigger Rate | Pass Delta | Composite | Status |
|---|---|---|---|---|---|
| ... | pass/fail | 0.XX | 0.XX | 0.XX | pass/fail |
A skill passes only if ALL four gates above pass. Any single gate failure marks the skill as fail.
Follow the existing IoC pattern from ci-cd-standards: the GitHub Actions workflow calls just recipes rather than inline scripts. Example:
just eval-gate-checkVerify this skill produces correct gating decisions:
evals/workspace/ with fixture files: struct-validation.json (status=pass), trigger-results/opencode.json (rate=0.72), trigger-results/gemini.json (rate=0.68), quality-results/iteration-1/benchmark.json (delta=0.15), selected.json (selected=revision-B, composite=0.72).pass.trigger-results/opencode.json rate to 0.4. Re-run. Confirm gate fails with trigger rate below threshold.benchmark.json delta to 0.05. Re-run. Confirm gate fails with quality delta below threshold.selected.json composite to 0.4. Re-run. Confirm gate fails with composite below threshold.struct-validation.json status to fail. Re-run. Confirm gate fails immediately on structural validation.OPENCODE_API_KEY, GEMINI_API_KEY). Missing keys cause silent failures.just eval-skill recipe handles this automatically.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.