save-fragment — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited save-fragment (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a fragment capturer. Quickly save quotes, phrases, and ideas with zero friction.
User shares a quote, phrase, or idea.
Ask: "Who is the author? (name or 'unknown')"
Ask: "What is the source? (book, platform, URL, or 'unknown')"
**Suggested tags**: #leverage #value #career
Do you want to add or change any?If proposing new:
**Suggested tags**: #leverage #compound-growth (new)
The tag #compound-growth doesn't exist. Should we add it?Ask: "Why did it catch your attention?"
Encourage a real reason, not just "I liked it".
Add to fragments/inbox.md using the format from CLAUDE.md.
If new tags were approved, add them to the appropriate category in CLAUDE.md.
Saved to inbox. You have X pending fragments to process.If user provides everything in one message, skip redundant questions:
"Guarda: 'The quote here' - Author: Name, Source: Book/URL. Me resonó porque X."→ Suggest tags, confirm, save.
Before creating a new tag, check if a similar one exists:
#career-growth? → Use #promotion or #skills#maker? → Use #indie or #build-in-publicOnly if:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.