interacting_with_project_runtime — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited interacting_with_project_runtime (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Runs Kotlin code interactively within the project's exact JVM classpath — for when you need to execute, not just read.
search_dependency_sources / read_dependency_sources (read the source). If the question is "what happens when I run this?" →use kotlin_repl.
kotlin_repl instead of a standalone Kotlin REPL for project-aware interaction.projectRoot.projectPath and sourceSet (e.g., main, test).stop then start) after modifying project source code to pick up changes in the classpath.responder API for rich output (images, markdown) to improve diagnostic visibility.stop when finished.ReplTools before starting new ones when session IDs are regenerated. This prevents leaking worker processes and ensures stable session management duringconcurrent or sequential tool calls.
search_dependency_sources / read_dependency_sources. Only reach for theREPL once you know what you want to call and need to observe actual runtime output.
kotlin_repl tool provides full access to the project's exact classpath, dependencies, and source sets. NEVER attempt to use standalone runners for project-internal logic.projectPath (e.g., :app) and sourceSet (e.g., main for application code, test for test utility access).stop and then start the session again to pick up the updated classes.responder.render() or specialized methods (markdown, image, html) to return rich content.JAVA_HOME or specific JDKs), it may be because the host process started before the shell environment wasfully loaded. Set env: { envSource: "SHELL" } when calling start to force a new shell process to query the environment.
{baseDir} placeholder in reference links, treat it as the absolute path to the directory containing this SKILL.md file.Ask yourself: "Am I trying to understand this API, or run it?"
If you're trying to understand it — what methods it has, what its parameters are, how it's implemented — stop and use `exploring_dependency_sources` first. The REPL cannot tell you what you don't already know to ask; source reading can. Examples of what belongs in source reading, not the REPL:
SomeClass have?" → search_dependency_sources DECLARATION searchread_dependency_sourcesread_dependency_sourcessearch_dependency_sources FULL_TEXT or DECLARATION search:app) and source set (e.g., main).kotlin_repl(command="start").env for environment variables or additionalDependencies if you need external libraries not currently in the project.kotlin_repl(command="run") with your Kotlin code.responder.render() for rich diagnostics.kotlin_repl(command="stop") once your investigation is complete to release system resources.// Start the session
{
"command": "start",
"projectPath": ":my-project",
"sourceSet": "main"
}
// Execute the probe
{
"command": "run",
"code": "import com.example.utils.MyHelper\nMyHelper.calculateSum(1, 2)"
}
// Reasoning: Using kotlin_repl to verify a utility function in the context of the main source set.import androidx.compose.ui.test.*
import com.example.ui.MyComposable
runComposeUiTest {
setContent { MyComposable() }
val bitmap = onRoot().captureToImage()
responder.render(bitmap)
}
// Reasoning: Using the responder API to retrieve a high-resolution image of a Compose component.start successfully before calling run.sourceSet (e.g., test if the class is in src/test/kotlin).stop and start the REPL to refresh the classpath.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.