Is freeze safe to install?

SaferSkills independently audited freeze (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/freeze/SKILL.md · 1 file

skills/freeze/SKILL.md0.9 KB · Markdown

name: freeze

description: Restrict Edit, Write, and MultiEdit to approved paths for the current Claude Code session.

allowed-tools: Bash, AskUserQuestion

disable-model-invocation: false

Freeze

Use when the user says to only edit a path, freeze edits, restrict edits, or lock file changes to a directory.

Process

If no path was supplied, ask which file or directory should be editable.
Resolve the path from the current working directory with Bash.
Run lstack freeze <path> or lstack freeze --allow <path> --allow <path2>.
Tell the user the boundary that is active.

Required Notes

Freeze applies to Edit, Write, and MultiEdit.
Read, Glob, Grep, and Bash are not blocked by freeze by default.
Bash can still mutate files. Freeze is an accidental-edit guard, not a security sandbox.
To change the boundary, run lstack unfreeze or lstack freeze <path>.

freeze— agent skill

Is freeze safe to install?

Freeze

Process

Required Notes

Audit the pieces. Scan the whole. Decide.