dev-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dev-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
用户通过 /dev-workflow 启动。可选传入 iteration-id 恢复已有迭代。
history-manager skill 执行 init(确保 docs/history.json 存在)。$ARGUMENTS 且为有效 iteration id,恢复该迭代;否则调用 history-manager 执行 new-iter 创建新迭代。history-manager 执行 status 读取当前迭代的 state,从该阶段继续执行。| 顺序 | 阶段 | Skill | 执行方式 | 说明 |
|---|---|---|---|---|
| 1 | 需求分析 | requirements-analysis | inline | 与用户对话,梳理功能点 |
| 2 | 技术选型 | technology-selection | inline | 询问全栈/前端/后端,选定技术栈 |
| 3 | 技术评审 | technical-review | fork/Explore | 评审架构可行性、API 契约、风险项 |
| 4 | 程序设计 | program-design | inline | 设计模块分层、流程、工程目录 |
| 5 | 任务拆分 | task-breakdown | fork/Plan | 将设计拆为可管理的开发单元 |
| 6 | 单元测试 | unit-testing | fork | 按任务单元设计测试用例 |
| 7 | 代码开发 | code-development | inline | 按测试驱动实现代码 |
| 8 | 自我验证 | self-verification | fork/Explore | 运行测试、集成验证、质量自检 |
history-manager 的 get-phase 和 check-file 检查该阶段是否已完成。若已完成则跳过,直接进入下一阶段。history-manager 的 set-phase <phase> <phase_id> 更新 history。{阶段缩写}-001 格式(如 req-001、ts-001)。同一迭代内递增。docs/{current_iteration_id}/。~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.