visual-companion — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited visual-companion (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Before doing anything else, silently check for exploration/exploration-dashboard.md.
Complete, proceed standalone.In Progress or TBD:authorized_skill, phase_number, and expected_output attributes from the <ORCHESTRATOR_DISPATCH> tag.authorized_skill matches "visual-companion" AND phase_number matches the dashboard phase:exploration-workflow. Stop generating output.exploration-workflow. Stop generating output from this skill.<example> <commentary>Demonstrates a direct user trigger asking to see layout options before building starts.</commentary> User: What should it look like? Agent: Reads the most recent Discovery Plan for context, then presents three plain-language layout options labelled Option A, Option B, and Option C — adapted to the specific problem domain — and asks the SME which feels closest to what they had in mind. </example>
<example> <commentary>Demonstrates the skill being invoked by prototype-builder as part of the coordinated build cycle.</commentary> User: [dispatched by prototype-builder after Discovery Plan approval] Agent: Reads the Discovery Plan silently, presents three contextually adapted layout options in plain language, confirms the SME's selection, and writes the confirmed layout direction to exploration/captures/layout-direction.md before signalling ready to build. </example>
This phase may be skipped for brownfield sessions or simple features where the design is straightforward. If skipped, it will be marked - [~] in the dashboard. The downstream Phase 3 skill handles missing layout direction gracefully.
This skill is invoked after the Discovery Plan is approved. Its purpose is to confirm the structure and shape of the output before any building or drafting starts. For software, this means UI layout. For non-software work, this means document structure, process flow shape, or analysis format. It ensures the SME has a clear picture of what they are agreeing to before anything is created.
Read the most recent file in exploration/discovery-plans/. Understand the problem domain, stakeholders, and success criteria before proposing anything. Do not skip this step.
Determine the output type from the Discovery Plan and session type:
Offer 3 structure options adapted to the context of the Discovery Plan. Describe each in plain language (2–4 sentences). No technical terms. No code. No wireframes. Words only.
Label them Option A, Option B, Option C.
For software UI outputs, adapt these starting points:
For process or workflow outputs, adapt these starting points:
For document or analysis outputs, adapt these starting points:
After presenting the three options, ask:
"Which of these feels closest to what you had in mind? Or if none of them fit, describe what you're picturing and I'll work with that."
Reflect back the chosen option in one sentence. For example:
"Got it — we'll go with a step-by-step flow so your team can move through each approval in order."
Then ask: "Is there anything you'd like to adjust about that?"
Wait for the SME's response before proceeding.
Write exploration/captures/layout-direction.md with this structure:
# Layout Direction
**Selected:** [Option letter and name]
**SME notes:** [any modifications or specific requests the SME mentioned]
**Confirmed:** [date]Announce: "Layout confirmed — Phase 2 is complete."
If operating within an active Exploration Session (i.e., exploration/exploration-dashboard.md exists and **Status:** is not Complete):
"Returning to your session dashboard now."
skill: "exploration-workflow".After invoking it, stop generating output from this skill. If the Skill tool is not available in your harness, tell the user: "Please run `/exploration-workflow` to continue your session."
If operating standalone (no dashboard file, or **Status:** Complete), the skill is complete.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.