document-this — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited document-this (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Add comments that carry information the code cannot. The "why" — the constraint, the invariant, the non-obvious tradeoff — is the only thing worth writing. What the code does is already in the code.
This skill enforces the discipline the deslop skill removes: do not write narrating comments that restate the code in English.
Write a comment if and only if removing it would leave a future reader confused about WHY — not WHAT.
| Write it | Skip it |
|---|---|
| Why this algorithm instead of the obvious one | What the loop does (the loop says it) |
| What invariant must hold when this is called | What the parameter means (the name says it) |
| Why this magic number (business rule, standard, bug workaround) | That the function returns a value |
| What breaks silently if you change the order | That this is a helper function |
| Which upstream bug this works around | That the class represents a user |
Read the function, class, or module the user pointed at. Do not infer scope — ask if unclear.
For each section of code, ask:
If none of the above apply to a section, write no comment for it.
| Language / context | Format |
|---|---|
| JavaScript / TypeScript (exported) | JSDoc /** */ on the function/class |
| JavaScript / TypeScript (internal) | Single-line // above the relevant line |
| Python (public function/class) | Docstring """...""" immediately inside |
| Python (internal) | # comment above the relevant line |
| Go | // comment on the exported symbol |
| Other | Match the file's existing comment style |
For JSDoc/docstrings on exported symbols, include:
@param lines only when the type or constraint is non-obvious@returns only when the return value has a non-obvious meaning or invariant@throws only when the caller must handle a specific error caseShow the diff (old → new) before applying. Say: "These comments explain the why — ready to apply?"
Do not apply until confirmed.
A minimal diff adding comments only. No logic changes.
Before:
def retry(fn, n=3, delay=1.5):
for i in range(n):
try:
return fn()
except Exception:
if i == n - 1:
raise
time.sleep(delay * (2 ** i))After (document-this applied):
def retry(fn, n=3, delay=1.5):
# Exponential back-off: each retry waits 1.5× longer to avoid thundering-herd
# on the upstream rate limiter, which resets on a fixed 2s window.
for i in range(n):
try:
return fn()
except Exception:
if i == n - 1:
raise
time.sleep(delay * (2 ** i))Note: the loop body itself needs no comment — it is self-evident.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.