cli-design — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cli-design (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill activates when designing command-line interfaces, implementing argument parsing, writing help text, handling terminal output formatting, or improving CLI user experience. It applies to new CLI tools, adding commands to existing CLIs, and refactoring CLI ergonomics.
Command Structure:
app deploy staging, app config set key=value.app auth login, app auth logout.app delete project not app rm proj (clarity over brevity for destructive ops).Flags and Options:
--verbose, --force, --dry-run (no value needed).--output json, --timeout 30s, --config ./my-config.yaml.-v (verbose), -f (force), -o (output), -q (quiet).--timeout 30s rather than requiring explicit timeout every time.Positional Arguments:
app deploy <environment> [version].echo "data" | app process.Help Text Design:
Usage: app <command> [options]
Commands:
deploy Deploy application to target environment
config Manage configuration settings
status Show current deployment status
Options:
-v, --verbose Show detailed output
-q, --quiet Suppress non-error output
-h, --help Show this help message
--version Show version number
Examples:
app deploy staging Deploy to staging
app deploy prod --dry-run Preview production deployment
app config set region=us-east Set region config--help must work on every subcommand.Interactive Prompts:
process.stdin.isTTY or equivalent).--yes / --no-input flag to skip all prompts (for automation).Exit Codes:
0 — Success. Command completed as expected.1 — General error. Something went wrong during execution.2 — Misuse. Invalid arguments, unknown flags, missing required input.130 — Interrupted (Ctrl+C / SIGINT).3 = partial success).Output Design:
if (stdout.isTTY) { prettyOutput() } else { jsonOutput() }.--output json flag to force structured output regardless of TTY.app list | grep "prod").Error Messages:
docker compose up db to start the database."--verbose).[ERR_DB_CONNECT] Failed to connect....--help with description, usage pattern, and examples.--yes).--verbose) and short form (-v) for common options.--force flag.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.