skillscake — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skillscake (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A skill is a directory containing one SKILL.md and a number of supporting files.
Send a skill to SkillsCake; it bakes a perfect version. You are the thin client: package the input, call the API, write the result back. The hard work is server-side. You should only need to pause on error, tier choice, and apply gate.
Two scripts: scripts/check.sh and scripts/skillscake.sh. Both print key=value lines; on error, follow reason and action.
context, or create one from a workflow the user just completed and wants to reuse. For upgrade, you need to know the location of the skill now. Surface to the user if needed. Read all files in the skill quickly.
bash scripts/check.sh. If status=error, followaction and stop.
base for a small, single-purpose skill; pro for asubstantial one (long, scripted, or multi-file). Pause here to ask the user, giving your recommendation, if they did not specify a tier when calling for SkillsCake. If they don't have the run credit they need, suggest they visit https://skillscake.com/account/plan.
steps, real inputs/outputs, and where judgment matters. Consider specific quotes from your work. You are the sanitizer: strip secrets,credentials, and customer PII; keep only what the skill needs to work. Note: between the skill and notes.txt you cannot exceed 30,000 characters.
OUT dir; the finished skill lands atOUT/<skill-name>/, and the script prints its exact skill_dir):
bash scripts/skillscake.sh --tier T --out OUT --skill DIR --notes notes.txt --label "<name>"bash scripts/skillscake.sh --tier T --out OUT --notes notes.txt --label "<name>"On failure, follow reason / action. Note: the run takes ~10 minutes. Run the task in the background once submitted.
skill_dir. Surface theskill and benefits to the user before moving to apply.
create, correctly add the skill to the user's skills depending on the harness.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.