Acme Todo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Acme Todo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Flask server implementation of the Simple Todo API defined in acmetodo.yaml.
pip install -r requirements.txtpython app.pyThe server will start on http://localhost:5000
GET /todos - List all todosPOST /todos - Create a new todoGET /todos/{id} - Get a specific todoPUT /todos/{id} - Replace a todoPATCH /todos/{id} - Update a todoDELETE /todos/{id} - Delete a todo# List all todos
curl http://localhost:5000/todos
# Create a new todo
curl -X POST http://localhost:5000/todos \
-H "Content-Type: application/json" \
-d '{"title": "Buy groceries", "completed": false}'
# Get a specific todo
curl http://localhost:5000/todos/1
# Update a todo
curl -X PATCH http://localhost:5000/todos/1 \
-H "Content-Type: application/json" \
-d '{"completed": true}'
# Delete a todo
curl -X DELETE http://localhost:5000/todos/1Todos have the following structure:
id (integer, read-only) - Unique identifiertitle (string, required) - Todo titlecompleted (boolean, default: false) - Completion statusdueDate (string, optional) - Due date in YYYY-MM-DD format~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.