swift-concurrency — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited swift-concurrency (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A small Claude Code marketplace of plugins I use day to day. Nothing here is proprietary; publishing it so you can install the same skills I do.
/plugin marketplace add pszypowicz/claude-skills
/plugin install <plugin-name>@claude-skillsOnce added, /plugin lists everything the marketplace offers. The marketplace is named claude-skills, after the name in .claude-plugin/marketplace.json.
| Plugin | Version | What it does |
|---|---|---|
ado | 2.2.0 | Azure DevOps operations: PRs, pipelines, policies, builds, variable groups, environments, feeds, branches, work items, comments. Uses az CLI with PAT auth from the environment or a sequester profile, falling back to az login tokens. |
swift-concurrency | 1.0.0 | Diagnose data races, implement actor isolation, resolve Sendable issues, fix @Observable + @MainActor interaction problems, and guide Swift 6 migration. |
modern-swift | 1.0.0 | Swift language features beyond concurrency: attributes (@available, @discardableResult, @frozen, @inlinable, @backDeployed, @resultBuilder, @propertyWrapper) and macro usage (#Preview, custom macros). |
go-dev | 1.0.0 | Go development with a toolchain-first verification workflow: writing, testing, debugging, profiling, and dependency management. |
house-style | 1.1.0 | Flag house-style violations in written prose and in git and gh message text: em dashes, non-ASCII bytes in PowerShell files, buzzwords, and filler phrases. Ships a word list and merges an optional user list. |
github | 1.0.0 | GitHub's remote MCP server, limited to documentation search and the read-only security toolsets: code scanning, secret scanning, Dependabot alerts, and security advisories. Authenticates with the gh CLI keyring token, so no token variable is needed. |
timestamps | 0.2.0 | Show when each prompt, reply block, and tool call in the transcript was produced, as a dim time at the right edge of the row. |
.claude-plugin/marketplace.json # marketplace manifest
plugins/<name>/
.claude-plugin/plugin.json # per-plugin manifest
.mcp.json # MCP server definitions, where applicable
skills/<skill>/SKILL.md # skill entry point
skills/<skill>/references/ # supporting reference material
skills/<skill>/scripts/ # bundled shell scripts, where applicable
commands/ # slash commands, where applicable
hooks/ # hook scripts and hooks.json, where applicable
rules/ # data files the hooks read, where applicable
types/ # TypeScript declarations of a hooks module's state, where applicable
tests/ # test suites for bundled scripts, where applicableMIT - see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.