core — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited core (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This Skill loads PRISM — the canonical operating framework for structured, multi-session, multi-vendor LLM-orchestrated audit and research. The framework is decomposed into a lean always-loaded core plus on-demand bundles; load the core first, fetch a bundle only when the work in front of you needs it.
(operating model and architecture, the Execution Envelope / Self-check / Output triple contract, the prompt-package engine, the context-pressure framework including the M5 bands and the in-core recovery floor, the §{section.lens-schema-what-orchestration-consumes} lens schema, Monitors M1–M12, Standing Principles, filename conventions, the atomic-prompt template, the operator-hint catalog, the engagement-closure gate, and the phase → bundle manifest). Phase-scoped mechanics (Setup, currency, continuity, corpus-access) are on-demand bundles — see step 5.
section 10.1.3): declare your model identity and confirm you are Claude, Opus-class / flagship tier (a capability floor — version-agnostic, latest by default). Halt and ask the operator on mismatch or cannot-determine.
attachments are present (Master, subject brief, and a Prompt Strategy if separate) and that the Master version matches what the last What's next predicted. Halt at HIGH severity on a missing required artifact or a version mismatch.
declared next action.
seam-, and condition-scoped mechanics are fetched on demand per the core's phase → bundle manifest (section 3.7.6). Run the visible self-check and fetch:
reference/setup.md (probes, three-layer readiness, Setup-artifact procedures).
reference/currency.md.reference/continuity.md (the in-core recovery floor stays resident; the full migration / recovery procedure is in the bundle).
reference/corpus-access.md.Each gutted area carries a fail-loud in-core stub — operating without the required bundle is detectable, not a silent gap.
Front-door carve-out (before the halts). If the operator's opening message is a bare orientation question ("how do I use PRISM", "where do I start", "what is this") with no engagement context — no Master, no subject — answer with a 30-second orientation and an offer to begin before the M1 / M2 halts in step 3; an orientation question is not an engagement open. SP-13 (step 2) still applies. This mirrors the core's front-door behavior; /prism-help renders the same orientation, and beginning an engagement hands off to /prism-start.
Read these with the file tool at the moment a task calls for them; they are not resident until you open them.
Fetch at Setup and whenever Probe 1 grades the strategy against lenses.
Self-check, Output, Decision brief, Stakeholder register, Claim inventory, Jurisdiction map, Dispatch register). Fetch when producing one of these artifacts.
seven probes (P1–P7), Setup-artifact procedures, strategy stability, onboarding, Library-reference-at-Setup, the Scope-Integrity Test, specialist-pass promotion, and the Claude-Project-as-Setup recommendation. Fetch at a Setup session / the P0 boundary.
session-open currency check. Fetch for an Update session or when the currency-check-at-open fires.
defensive migration at natural seams, and cold-open missing-handoff recovery. Fetch at a resume / context-seam, or when M5 reads 🟠/🔴.
investigation-posture Envelope for a targeted external-corpus lookup). Fetch when the dispatch-builder classifies a pass as corpus-access.
repo_backed persistence mechanics. Fetch when a non-default orchestration surface or persistence value is in play.
Meta standing lanes, the PRISM UI, and Setup onboarding. Fetch when lanes / Desk / UI / onboarding work is in front of you.
(§A–H), the promotion map, the canonical execution-paste model, and the digest-preimage pin. Fetch when building or converging a dispatch.
+ craft conventions, the interactive workbook cockpit pattern, the presentation house-style, and the reconcile-at-close checklist. Fetch when building or closing an engagement deliverable.
archive, share modes, the image-redaction procedure, and the read-the-repo-not-the-mirror canonical-source block. Fetch when preparing an external handoff.
the v1.x→v2 surface drift. Fetch when tracing a decision's rationale or origin.
calibration items. Fetch to see constructs flow in a real audit.
conflict, surface the conflict and ask — do not silently override the framework.
consent. SP-1: never silently regenerate canonical artifacts.
context band.
turns carry no hints.
missing-handoff recovery protocol.
projects stay on v1.10.4.
the operator decides.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.