workflow-vault-weekly — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited workflow-vault-weekly (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Runs the five vault-health skills in dependency order so the later stages have current data from the earlier ones. Use weekly.
/morning, /eod, /log) cover the within-day cadence.| Step name | Stage | Invokes |
|---|---|---|
lint | Lint | vault-lint |
backlinks | Backlinks | backlinks |
index | Vault index | vault-index |
signals | Weekly signals | weekly-signals |
learnings | Weekly learnings | weekly-learnings |
lint — invokes vault-lintScans Concepts/, finds orphans, broken links, missing pages, contradictions. Writes vault-lint-report.md.
Output: report file exists. Checkpoint: surface any blocking issues before continuing.
backlinks — invokes backlinksAudits and repairs the backlink graph; flags structurally important orphans.
Output: backlink-audit summary in conversation. Checkpoint: confirm fixes applied before rebuilding the index.
index — invokes vault-indexRebuilds the vault-index note from current state.
Output: vault-index.md updated. Checkpoint: skip checkpoint by default — auto-continue.
signals — invokes weekly-signalsReads patterns.md + the week's daily notes; surfaces deferral patterns and flagged items.
Output: weekly-signals output (in conversation; can be saved if user asks). Checkpoint: confirm signal review before surfacing publishable threads.
learnings — invokes weekly-learningsLooks for publishable threads from the week's signals + vault deltas.
Output: list of 1–3 candidate threads.
Default: run lint → backlinks → index → signals → learnings in order, with checkpoints between each (except index, which auto-continues).
--resume-from <step>: skip every step before <step> and begin from <step>. The named step itself runs.
If <step> is not in {lint, backlinks, index, signals, learnings}, print:
Invalid resume-from step: <step> Valid steps: lint, backlinks, index, signals, learnings
…and stop.
The vault stages mostly read from the live vault, so missing prior outputs are usually fine — but a few steps depend on prior reports.
--resume-from lint — same as a fresh run.--resume-from backlinks — runs against the live vault. If vault-lint-report.md is absent, warn the user that lint would normally have surfaced issues first; ask whether to continue.--resume-from index — runs against the live vault. No required prior state.--resume-from signals — needs patterns.md and at least the current week's daily notes. If patterns.md is missing, surface the gap and stop.--resume-from learnings — works best with the previous step's signals output. If signals weren't run this week, ask the user to paste the signals output or confirm we should derive learnings without them.Examples:
/workflow-vault-weekly --resume-from signals --no-pause # cron-style mid-week signal pull /workflow-vault-weekly --resume-from learnings # signals already reviewed manually
--skip <step> to skip a step (e.g. --skip learnings to stop after signals).--no-pause to run end-to-end (use this for the cron-driven weekly run).If a stage errors, stop and print: which step failed, the underlying skill's error, and the resume command (/workflow-vault-weekly --resume-from <step>).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.