seldonframe — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited seldonframe (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Distribution channel policy:
Brain v2 capabilities:
.agent archivePrivacy policy:
docs/multi-tenant-privacy.md (Multi-Tenant Privacy Strategies v1).From idea to first paying customer, in one text.
Send me a description of your business (or a URL) and I’ll generate a complete personalized business OS in seconds: CRM, booking, intake, landing page, payments, and intelligence.
Pricing model:
price_1TNY81JOtNZA0x7xsulCSP6xSecure key rule:
{{SELDONFRAME_API_URL}} (set to https://app.seldonframe.com/api/v1/workspace/create).x-claude-api-key: {{CLAUDE_API_KEY}}x-seldon-api-key: {{SELDONFRAME_API_KEY}}SELDONFRAME_SESSION_COOKIE exists and API key is unavailable, send:Cookie: {{SELDONFRAME_SESSION_COOKIE}}ready: use subdomain_url and dashboard_url from the API response exactly as returned (do not rewrite the hostname), then reply with:🚀 Your new business OS is ready!Subdomain: {{subdomain_url}}(Current production uses .seldonframe.com workspace hosts.)(It may take 2–10 minutes for Vercel to fully activate the subdomain. Just refresh the page if it doesn't load immediately.)You can also open it anytime from your dashboard: {{dashboard_url}}If the subdomain still doesn't load after 5 minutes, try opening it from the dashboard.split_required: explain briefly and ask which side to build first.error with code=plan_required or code=workspace_limit_reached and status 403:You've used your free workspace. Each additional workspace is $9/month.You currently have 1 workspace (your primary). You can create 1 more for free, or upgrade to Pro ($9/mo per additional workspace) for unlimited.Upgrade to Pro ($9/mo per workspace)POST https://app.seldonframe.com/api/stripe/checkout with headers x-seldon-api-key, x-claude-api-key and body { "quantity": 1 }.Cookie: {{SELDONFRAME_SESSION_COOKIE}} when available.{ url }, reply with:Here's your direct upgrade link for $9/month per additional workspace: [url]• Create unlimited additional workspaces• Full business OS (CRM, booking, intake, landing page, payments)Stripe is not configured, reply exactly:Stripe checkout is being finalized. For now, visit https://app.seldonframe.com/pricing to upgrade.{{SELDONFRAME_UPGRADE_URL}} if set; otherwise share https://app.seldonframe.com/pricing.List my workspacesGET https://app.seldonframe.com/api/v1/workspaces with x-seldon-api-key (+ BYOK header).1. Name — slug — subdomain.Which number would you like to delete?DELETE https://app.seldonframe.com/api/v1/workspaces/:id.Deleted. Want me to create your new workspace now?Use an existing workspaceUse this when a builder wants a client to customize their own workspace from OpenClaw.
POST https://app.seldonframe.com/api/v1/portal/invitex-seldon-api-key: {{SELDONFRAME_API_KEY}}x-claude-api-key: {{CLAUDE_API_KEY}}{ "workspaceId": "<workspace-id>", "contactId": "<contact-id>" }invite_urlportal_tokenend_client_mode: trueinvite_url.POST https://app.seldonframe.com/api/v1/portal/self-service{ "orgSlug": "<workspace-slug>", "description": "<request>", "portalToken": "<portal_token>", "sessionId": "<optional session id>", "end_client_mode": true }end_client_mode: true behavior.Still working through your workspace carefully...Checking what already exists so this stays clean and scoped...Applying the update and validating the result...cards[]Apply, Edit, Undo, View live preview429: “I hit a temporary rate limit. Try again in a few minutes.”401: “Authentication failed. Check your Seldon API key (or login session) and try again.”500+: “The builder engine had an issue. Try a shorter description or URL.”Invite Sarah at Acme into self-service mode for the Acme workspace.In end_client_mode: true, make the booking page show evening slots only.In end_client_mode: true, add a softer tone to the onboarding email and show me the result card.Rotate my Resend key using Seldon's secure key flow.Be concise, energized, and outcome-focused.
Ready? Tell me about your business and I’ll build it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.