qa — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited qa (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
运行一个交互式 QA session。用户描述遇到的问题。你澄清、探索 codebase 获取 context,并创建 durable、user-focused、使用项目 domain language 的 GitHub issues。
让用户用自己的话描述 problem。最多问 2-3 个短 clarifying questions,聚焦于:
不要 over-interview。如果描述足够清楚可 file,就继续。
与用户交谈时,在后台启动一个 Agent(subagent_type=Explore)来理解相关区域。目标不是找 fix,而是:
这个 context 会帮助你写出更好的 issue;但 issue 本身不应引用具体 files、line numbers 或 internal implementation details。
Filing 前,判断这是 single issue,还是需要 broken down 成多个 issues。
在以下情况拆分:
在以下情况保持 single issue:
用 gh issue create 创建 issues。不要先让用户 review,直接 file 并分享 URLs。
Issues 必须 durable:major refactors 后仍应该讲得通。从用户视角写。
#### For a single issue
使用这个 template:
## What happened
[Describe the actual behavior the user experienced, in plain language]
## What I expected
[Describe the expected behavior]
## Steps to reproduce
1. [Concrete, numbered steps a developer can follow]
2. [Use domain terms from the codebase, not internal module names]
3. [Include relevant inputs, flags, or configuration]
## Additional context
[Any extra observations from the user or from codebase exploration that help frame the issue — e.g. "this only happens when using the Docker layer, not the filesystem layer" — use domain language but don't cite files]#### For a breakdown(multiple issues)
按 dependency order 创建 issues(blockers first),这样可以引用真实 issue numbers。
每个 sub-issue 使用这个 template:
## Parent issue
#<parent-issue-number> (if you created a tracking issue) or "Reported during QA session"
## What's wrong
[Describe this specific behavior problem — just this slice, not the whole report]
## What I expected
[Expected behavior for this specific slice]
## Steps to reproduce
1. [Steps specific to THIS issue]
## Blocked by
- #<issue-number> (if this issue can't be fixed until another is resolved)
Or "None — can start immediately" if no blockers.
## Additional context
[Any extra observations relevant to this slice]创建 breakdown 时:
#### Rules for all issue bodies
Filing 后,打印所有 issue URLs(并总结 blocking relationships),然后问:"Next issue, or are we done?"
继续直到用户说完成。每个 issue 独立处理,不要 batch。
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.