os-architect — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited os-architect (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
os-architect is the single entry point to the Agentic OS evolution ecosystem. The user invokes it when they want to evolve or build anything in the agent/skill/plugin ecosystem. It interviews, audits, and routes — never implements directly. The full behavior spec lives in agents/os-architect-agent.md.
/os-architectNo arguments needed. Start with a plain-language description of what you want to evolve.
| Path | When | Mechanism |
|---|---|---|
| A+ — No Action | audit shows full match + all patterns present | tell user, no dispatch |
| A — Orchestrate | capability exists, current | route to existing agent/skill + run_agent.py |
| B — Update | capability exists, outdated/incomplete | os-evolution-planner writes plan + prompt → dispatch + optional improvement loop |
| C — Create | gap confirmed | create-sub-agent scaffold → os-evolution-planner plan + prompt → eval lab → evals HARD-GATE → os-architect-tester validates |
| Skill / Agent | Purpose |
|---|---|
os-evolution-planner skill | Called for Path B/C: writes structured task plan + Copilot CLI delegation prompt |
os-architect-tester agent | Validates os-architect correctness via scenario simulation — run after any changes |
improvement-intake-agent | Called for Category 3 (Lab Setup): configures the skill improvement run |
create-sub-agent | Called for Path C (Gap Fill): scaffolds the new agent/skill file |
which gh returns a result but Copilot CLI is not configured. Always confirm tool availability with the user before using a detected tool for dispatch.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.