exploration-session-brief — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited exploration-session-brief (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<example> <commentary>User wants to start a new exploration session.</commentary> User: Let's kick off a new exploration session. I want to capture a brief for the problem I've been thinking about. Agent: [invokes exploration-session-brief, starts Stage 1 context gathering] </example>
<example> <commentary>User has a vague idea and wants structured help thinking it through.</commentary> User: I have a rough idea to explore — somewhere between a process improvement and a new feature. Can you help me think it through and write it up? Agent: [invokes exploration-session-brief, guides user through the 3-stage co-authoring workflow] </example>
<example> <commentary>Explanation request — do NOT invoke. Only trigger when user actively wants to start or capture a brief, not when asking about the skill.</commentary> User: What does the exploration-session-brief skill do? Don't start it yet. Agent: [explains the skill without invoking it] </example>
<example> <commentary>Handoff requests route to exploration-handoff, not this skill.</commentary> User: I finished my exploration session, help me write the handoff package. Agent: [invokes exploration-handoff, NOT exploration-session-brief] </example>
Note: This skill runs fully interactively via Claude — no script needed. execute.py is a planned batch-mode convenience wrapper that hasn't been built yet, but the core skill works now. The intake-agent provides an alternative agentic dispatch path.This skill provides a structured, 3-stage interactive workflow for generating an Exploration Session Brief. Guide the user through each stage in sequence — do not skip ahead or dump the full brief at once.
Important Note for Agents: Do NOT passively run a bash script or dump a massive block of markdown. You must guide the user through the following 3 stages.
Your goal is to understand the boundaries of the exploration before drafting anything. Ask all three questions together in a single message:
Wait for the user's response. If any answer is too sparse to proceed (e.g., one-word domain, no trigger explained), ask one targeted follow-up before moving to Stage 2. Do not proceed until you have a clear trigger and at least one concrete detail.
Build the brief iteratively — do not write the entire document in one pass.
| Domain | Suggested sections |
|---|---|
| Software feature/system | Problem Statement · Stakeholders · Current Behavior · Desired Behavior · Constraints · Open Questions |
| Business process | Problem Statement · Stakeholders · Current Process · Pain Points · Desired State · Constraints · Open Questions |
| Risk/compliance | Risk Description · Affected Parties · Current Exposure · Mitigation Options · Constraints · Open Questions |
| Research/strategy | Research Question · Context · What We Know · What We Don't Know · Success Criteria · Open Questions |
[UNCONFIRMED].Once all sections are drafted and approved, stress-test the brief before writing it out:
[CONFIRMED] and [UNCONFIRMED] markers.Write the approved, refined markdown content to: exploration/session-brief.md
Use the Canonical Session Brief Schema headers defined in agents/intake-agent.md so that exploration-workflow Block 1 can silently read and hydrate the dashboard without re-asking setup questions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.