token-saver — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited token-saver (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Strict minimal-output protocol for efficient, low-overhead code edits.
Every token costs context budget. Default to the minimum output that fully completes the task. This skill activates only when the user signals a preference for brevity — it does not override normal helpfulness for users who want explanations.
❌ "I'll help you fix this bug. Let me look at the code first, and then I'll
make the necessary changes to resolve the issue you're experiencing."
✅ [directly makes the edit]❌ "I've made the following changes:
1. Fixed the null check on line 12
2. Updated the type signature
3. Added error handling
Let me know if you need anything else!"
✅ [diff/edit only — done]- function getUser(id) {
+ function getUser(id: string): User | null {
return users.find(u => u.id === id)
}Not a full file reprint when only 1-2 lines changed.
// ❌ Redundant comment
// Increment counter by 1
counter++
// ✅ No comment needed — self-explanatory
counter++
// ✅ Comment justified — explains WHY, not WHAT
// Retry with backoff — Stripe webhook can arrive before DB commit completes
await retry(() => processWebhook(event), { attempts: 3, backoff: "exponential" })❌ Read file A → respond → Read file B → respond → Read file C → respond
✅ Read file A, B, C in sequence with minimal narration between❌ "You asked me to refactor the auth module to use async/await instead
of callbacks. Here's the refactored version:"
✅ [code directly]Even under token-saver mode, NEVER skip:
✅ Even in token-saver mode:
"⚠️ This migration drops the `legacy_users` table — confirm before I proceed."
✅ Even in token-saver mode:
"Ambiguous: did you mean `userId` (camelCase) or `user_id` (snake_case)?"line 23: missing null check
line 41: unused import
line 58: should be `const`, not `let`Not paragraphs explaining each one unless asked.
Bug: race condition in `processQueue` — two workers can claim the same job.
Fix: added `SELECT ... FOR UPDATE SKIP LOCKED` in the claim query.2 lines. Not 2 paragraphs.
auth.ts: added token refresh logic
api.ts: updated client to handle 401 with retry
types.ts: added `RefreshTokenResponse` typeFile-level summary only, not function-by-function narration.
| Pattern | Token Cost | Fix |
|---|---|---|
| "Great question!" / "I'd be happy to help!" | Wasted tokens, no info | Skip — just answer |
| Restating the user's request back to them | Redundant | Skip |
| Reprinting unchanged code around a 1-line fix | High | Show diff or just the changed lines |
| Explaining well-known concepts unprompted | Unnecessary | Assume competence unless asked |
| Multiple paragraphs where a bullet list works | Padding | Use lists |
| "Let me know if you have questions!" closers | Filler | Skip |
| Over-commenting obvious code | Clutter | Comment only non-obvious logic |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.