run-73caf5 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited run-73caf5 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Pipeline controller. Reads state.json, determines next step, executes it, updates state. Stops at gates or on error. Never skips steps.
/ultra-analyzer:run [run-name]
If run-name omitted, look for .planning/ultra-analyzer/<single-run>/ — if exactly one exists, use it; if multiple, error with a list.
$ARGUMENTS.ls .planning/ultra-analyzer/ — if exactly one dir, use it; else print available runs and exit..planning/ultra-analyzer/<run-name>/$RUN_PATH/state.json missing — tell user to call /ultra-analyzer:init first.CURRENT_STEP=$(bash ${CLAUDE_PLUGIN_ROOT}/bin/state.sh get $RUN_PATH .current_step)
STATUS=$(bash ${CLAUDE_PLUGIN_ROOT}/bin/state.sh get $RUN_PATH .status)
ULTRA_TIER=$(bash ${CLAUDE_PLUGIN_ROOT}/bin/state.sh get $RUN_PATH .profile.ultra_gate_tier) # e.g. "--large"
SYNTH_MODEL=$(bash ${CLAUDE_PLUGIN_ROOT}/bin/state.sh get $RUN_PATH .profile.synthesizer_model) # e.g. "opus"The tier drives gate rigor. User can change mid-run with /ultra-analyzer:set-profile.
sha256(config.yaml) against sha256(templates/config.yaml.template) — if identical, block with "edit config first".seeds.md must have at least one non-comment, non-template line under "## P1 seeds".current_step = "pre-discover-gate" and call this skill recursively (or return and let user re-invoke).This is GATE 1. Invoke /ultra to validate config + seeds + connector.
Preflight: verify /ultra is installed. Before invoking, confirm the ultra skill is available. Follow the detection + halt-message rules in ${CLAUDE_PLUGIN_ROOT}/references/ultra-dep-preflight.md — that file is the single source of truth for the halt text; read it and print it verbatim to the user if the ultra skill is not available.
Gate 1 cannot be bypassed. Failing the preflight sets status = blocked and does NOT advance state.
Note: on Claude Code v2.1.110+ the dependency auto-installs via the plugin's dependencies field, so most users never see this halt. It exists as a belt-and-suspenders safety net for older Claude Code versions, --plugin-dir local dev loads, and users who manually uninstalled ultra.
Use the Skill tool to invoke ultra with the tier read from state.profile.ultra_gate_tier:
args: $ULTRA_TIER --task=analyzer-gate1-<run-name> Review analyzer run bootstrap for soundness. Read: <RUN_PATH>/config.yaml, <RUN_PATH>/seeds.md, <RUN_PATH>/connector.md. Criteria: (1) seeds have sufficient P1/P2/P3 count — not template placeholders; (2) connector.md implements all 6 contract operations with concrete, runnable instructions; (3) connector auth / env-vars are declared (not hardcoded); (4) budget tiers realistic for corpus scale; (5) forbidden_fields / forbidden_patterns are plausible for the source. Produce verdict PASS or FAIL with specific remediation. Write report to <RUN_PATH>/validation/gate1-<timestamp>.md.Parse the /ultra verdict:
state.ultra_gates["pre-discover"].verdict = "PASS", checkpoint, advance current_step = "discover", return control to user with "Gate 1 PASS. Run /ultra-analyzer:run again to proceed to discover."Invoke the discover-topics skill (delegates to the connector for schema sampling).
claude --print "/ultra-analyzer:discover-topics <RUN_PATH>"Wait for completion. Verify topics/pending/ is non-empty and state.counters.topics_total > 0. If not, mark status=failed and abort with diagnostic.
If successful, checkpoint, advance current_step = "analyze", and tell user:
✓ Discover complete. N topics generated.
Next: open 1-5 terminals and run:
bash ${CLAUDE_PLUGIN_ROOT}/bin/launch-terminal.sh <RUN_PATH>
Or run /ultra-analyzer:run to start a single-terminal worker inline.Two modes:
launch-terminal.sh as a blocking subprocess. User waits.Default to mode 2 (poll). If counters.topics_pending + in-progress == 0, all topics resolved.
When complete: verify counters.findings_passed / counters.topics_total >= 0.5 as a sanity floor. If below 50%, mark status=blocked — something is systemically wrong, user must investigate.
If healthy, checkpoint, advance current_step = "pre-synthesize-gate".
This is GATE 2. Invoke /ultra for findings review before synthesis. Tier from state.profile.ultra_gate_tier.
args: $ULTRA_TIER --task=analyzer-gate2-<run-name> Review findings corpus before synthesis. Seeds: <RUN_PATH>/seeds.md. Findings: <RUN_PATH>/findings/. Validator verdicts: <RUN_PATH>/validation/findings/. Criteria: (1) coverage vs seeds — did topics drift?; (2) denominator discipline — no bare "% of users" claims without subset qualifier; (3) divergent redundancy pairs flagged not averaged; (4) any PASS finding that should be FAIL. Produce verdict PASS or revise-list. Write to <RUN_PATH>/validation/gate2-<timestamp>.md.current_step = "synthesize". bash ${CLAUDE_PLUGIN_ROOT}/bin/requeue.sh $RUN_PATH <topic-basename> <reason-slug>This moves the topic from done/ back to pending/ with a retry tag, archives the prior findings + verdict under state/requeue-archive/, and decrements counters.topics_done and counters.findings_passed to keep state consistent. Do NOT advance. Set status = blocked. User must re-run workers, then re-run Gate 2.
Invoke with the model declared by the active profile (usually Opus for large/xl, Sonnet for small/medium):
claude --plugin-dir ${CLAUDE_PLUGIN_ROOT} --model $SYNTH_MODEL --print "/ultra-analyzer:synthesize-report <RUN_PATH>"Wait. Verify synthesis/REPORT.md exists and is non-trivial (>2KB). If ok, checkpoint, advance current_step = "done", status = passed.
Print final summary: path to REPORT.md, counters, timings. Exit cleanly.
Print last error from run.log. Exit non-zero.
After every state transition, run:
bash ${CLAUDE_PLUGIN_ROOT}/bin/state.sh checkpoint $RUN_PATH~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.