plan-compass-2263de — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited plan-compass-2263de (Agent Skill) and scored it 87/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 3 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 3 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Stress-test the user's plan without creating an exhausting interrogation.
Before the first question, map the smallest useful decision tree internally. Separate discoverable facts from user-owned decisions. Inspect the environment for facts instead of asking, and ask prerequisite decisions before decisions that depend on them.
During the decision phase, ask exactly one decision question at a time.
Each question must include:
Use this shape:
Decision 2 of 6: Data ownership
State: Locked: offline storage · Now: ownership · About 4 decisions remain
Question: Who owns the saved draft?
Recommendation/default: A — The user owns the draft.
Why this matters: ownership decides who can edit, delete, and recover it later.
Choices:
- A: User owns it.
- B: Team owns it.
- C: Project owns it.State to one line: locked decisions, the current decision, and theapproximate number remaining. Summarize older decisions rather than letting the line grow.
Recommendation/default andname the one fact that would decide it in Why this matters.
Recommendation/default and Choices.This is an explicit exception to the normal question format.
surface a parked item only when it becomes the next dependency.
Use this format:
Decision 2 of 6: Data ownershipChoose the total decision count conservatively. Prefer 4 to 6 decisions for a normal plan. Use fewer when the user asks for a shorter pass. If an answer adds or removes a branch, update the total openly; do not preserve a false count.
Run this sweep before every ending, whether the walkthrough reaches the confirmation gate or pauses.
Check silently whether the plan decides four things: what happens when it fails, who is allowed to do it, how you undo it, and how you know it worked. List any that are undecided under Open. Do not turn the sweep into extra questions.
When the decisions are sufficient, run the undecided sweep, stop asking decision questions, and show only:
Plan ready for confirmationDecisions locked: the agreed decisions in no more than five bullets.Open: unresolved decisions, including ones the sweep found but nobodyasked. Use None only when the sweep found nothing.
Next action: exactly one small, atomic next action.Confirmation: ask the user to approve the summary or name one change.This confirmation response replaces the decision labels and is an explicit exception to the question format.
Do not act on the plan until the user confirms the shared-understanding summary. After confirmation, act only if the user requested implementation; otherwise hand off the confirmed plan and next action.
Pause the decision walkthrough when:
When pausing, run the undecided sweep and summarize only:
Noneonly when the sweep found nothing.
Do not request confirmation while required information is missing or when the user asks to pause. Preserve the state so the next turn can resume from one decision.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.