mine-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mine-skill (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill requires Python 3.8+ and standard library only. No external packages needed.
To install this skill's dependencies:
pip-compile ./requirements.in
pip install -r ./requirements.txtSee ./requirements.txt for the dependency lockfile (currently empty — standard library only).
Run the targeted analysis pipeline on a single Agent Skill. This allows for focused extraction and synthesis from isolated directories without processing an entire plugin.
analyze-plugin skill, focused purely on this component.synthesize-learnings./mine-skill <path-to-skill-directory># Analyze a specific skill within a knowledge plugin
/mine-skill claude-knowledgework-plugins/sales/skills/call-prep
# Analyze one of our own core skills
/mine-skill plugins\ reference/agent-scaffolders/skills/create-pluginanalyze-plugin operating in Single Skill Mode on the provided $ARGUMENTS.scripts/inventory_plugin.py runs against the skill path.Security scanning is enabled by default. Credential detection, network call detection, and environment variable checks run on all script files unless --no-security is passed.references/pattern-catalog.md and detects anti-patterns.synthesize-learnings is invoked to map discovered patterns back to our core agent-scaffolders and agent-scaffolders.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.