fix — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fix (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Unified skill for fixing issues of any complexity with intelligent routing.
--auto - Activate autonomous mode (default); high-risk fixes stop for human approval before finalize/commit/ship--review - Activate human-in-the-loop review mode--quick - Activate quick mode--parallel - Activate parallel mode: route to parallel fullstack-developer agents per issue<HARD-GATE> Do NOT propose or implement fixes before completing Steps 1-2 (Scout + Diagnose). Symptom fixes are failure. Find the cause first through structured analysis, NEVER guessing. If 3+ fix attempts fail, STOP and question the architecture — discuss with user before attempting more. User override: --quick mode allows fast scout→diagnose→fix cycle for trivial issues (lint, type errors). </HARD-GATE>
<HARD-GATE-SCOUT-FIRST> Always scan the codebase BEFORE asking clarifying questions or forming hypotheses. Mandatory scout outputs (collect before Step 2):
git log --oneline -20) touching scouted files — possible introducerState a 3-6 bullet codebase-context summary to the user before asking questions. </HARD-GATE-SCOUT-FIRST>
<HARD-GATE-EXACT-ROOT-CAUSE> Do NOT propose a fix until you can answer ALL of these in one concrete sentence each:
If ANY item is vague ("probably", "I think", "something with…"), use AskUserQuestion to gather missing facts (logs, repro, env) OR run more scout/debug — never guess.
Use AskUserQuestion with options grounded in scout findings (specific files, specific commits, specific functions) — never abstract. </HARD-GATE-EXACT-ROOT-CAUSE>
<HARD-GATE-NO-SIDE-EFFECTS> The fix is NOT done until verified to be side-effect-free. Step 5 MUST prove:
If verification reveals a side effect, regression, or broken workflow, STOP. Do NOT silently patch around it. Use AskUserQuestion to present:
Let the user decide. Do not assume. </HARD-GATE-NO-SIDE-EFFECTS>
| Thought | Reality |
|---|---|
| "I can see the problem, let me fix it" | Seeing symptoms ≠ understanding root cause. Scout first. |
| "Quick fix for now, investigate later" | "Later" never comes. Fix properly now. |
| "Just try changing X" | Random fixes waste time and create new bugs. Diagnose first. |
| "It's probably X" | "Probably" = guessing. Use structured diagnosis. Verify first. |
| "One more fix attempt" (after 2+) | 3+ failures = wrong approach. Question architecture. |
| "Emergency, no time for process" | Systematic diagnosis is FASTER than guess-and-check. |
| "I already know the codebase" | Knowledge decays. Scout to verify assumptions before acting. |
| "The fix is done, tests pass" | Without prevention, same bug class will recur. Add guards. |
flowchart TD
A[Issue Input] --> B[Step 0: Mode Selection]
B --> C[Step 1: Scout - Understand Context]
C --> D[Step 2: Diagnose - Structured Root Cause Analysis]
D --> E[Step 3: Complexity Assessment + Task Orchestration]
E -->|Simple| F[Quick Workflow]
E -->|Moderate| G[Standard Workflow]
E -->|Complex| H[Deep Workflow]
E -->|Parallel| I[Multi-Agent Fix]
F --> J[Step 4: Fix Implementation]
G --> J
H --> J
I --> J
J --> K[Step 5: Verify + Prevent]
K -->|Pass + Prevention in place| L[Step 6: Finalize]
K -->|Fail, <3 attempts| D
K -->|Fail, 3+ attempts| M[Question Architecture]
M --> N[Discuss with User]
L --> O[Report + Docs + Journal]This diagram is the authoritative workflow. If prose conflicts with this flow, follow the diagram.
First action: If there is no "auto" keyword in the request, use AskUserQuestion to determine workflow mode:
| Option | Recommend When | Behavior |
|---|---|---|
| Autonomous (default) | Simple/moderate issues | Auto-approve only when review artifacts and validator pass |
| Human-in-the-loop Review | Critical/production code | Pause for approval at each step |
| Quick | Type errors, lint, trivial bugs | Fast scout → diagnose → fix → review cycle |
See references/mode-selection.md for AskUserQuestion format.
Purpose: Understand the affected codebase BEFORE forming any hypotheses.
Mandatory skill chain:
scout skill OR launch 2-3 parallel Explore subagentsgit log)./docs for project context if unfamiliarQuick mode: Minimal scout — locate affected file(s) and their direct dependencies only. Standard/Deep mode: Full scout — map module boundaries, test coverage, call chains.
Output: ✓ Step 1: Scouted - [N] files mapped, [M] dependencies, [K] tests found
Purpose: Structured root cause analysis. NO guessing. Evidence-based only.
Mandatory skill chain:
debug skill (systematic-debugging + root-cause-tracing techniques).sequential-thinking skill — form hypotheses through structured reasoning, NOT guessing.Explore subagents to test each hypothesis against codebase evidence.problem-solving skill for alternative approaches.See references/diagnosis-protocol.md for full methodology.
Output: ✓ Step 2: Diagnosed - Root cause: [summary], Evidence: [brief], Scope: [N files]
Classify before routing. See references/complexity-assessment.md.
| Level | Indicators | Workflow |
|---|---|---|
| Simple | Single file, clear error, type/lint | references/workflow-quick.md |
| Moderate | Multi-file, root cause unclear | references/workflow-standard.md |
| Complex | System-wide, architecture impact | references/workflow-deep.md |
| Parallel | 2+ independent issues OR --parallel flag | Parallel fullstack-developer agents |
Task Orchestration (Moderate+ only): After classifying, create native Claude Tasks for all phases upfront with dependencies. See references/task-orchestration.md.
TaskCreate with addBlockedBy for dependency chainsTaskUpdate as each phase completesTaskCreate/TaskUpdate/TaskGet/TaskList) are CLI-only — unavailable in VSCode extension. If they error, use TodoWrite for progress tracking. Fix workflow remains fully functional without them.Purpose: Prove the fix works, has NO side effects, and prevents the same bug class from recurring. See HARD-GATE-NO-SIDE-EFFECTS.
Mandatory skill chain:
code-reviewer subagent with explicit instructions to check: (a) root cause actually addressed (not symptom-patched), (b) no broken business logic in blast radius, (c) no new failure modes, (d) follows existing patterns from scout. Pass scout summary + diagnosis report as context.../_shared/references/workflow-artifacts.md, then run node claude/hooks/workflow-artifact-gate.cjs --stage finalize --artifact-dir <artifact-dir>.references/prevention-gate.md.Bash agents for typecheck + lint + build + test.If verification fails OR a side effect is detected: Use AskUserQuestion per HARD-GATE-NO-SIDE-EFFECTS — present what broke, why, and 2-4 concrete options (revert, narrow scope, update dependents, accept). Never silently patch.
If verification fails: Loop back to Step 2 (re-diagnose). After 3 failures → question architecture, discuss with user.
See references/prevention-gate.md for prevention requirements.
Output: ✓ Step 5: Verified + Prevented - [before/after comparison], [N] tests added, [M] guards added
docs-manager subagent → update ./docs if changes warrant (NON-OPTIONAL)TaskUpdate → mark ALL Claude Tasks completed (skip if Task tools unavailable)git-manager subagent/journal to write a concise technical journal entry upon completionSee references/skill-activation-matrix.md for complete matrix.
Always activate (ALL workflows):
scout (Step 1) — understand before diagnosingdebug (Step 2) — systematic root cause investigationsequential-thinking (Step 2) — structured hypothesis formationAlways activate (Step 6 Finalize):
project-management — MANDATORY for sync-back and progress tracking, every fixConditional:
problem-solving — auto-triggers when 2+ hypotheses fail in Step 2brainstorm — multiple valid approaches, architecture decision (Deep only)context-engineering — fixing AI/LLM/agent codeSubagents: debugger, researcher, planner, code-reviewer, tester, Bash Parallel: Multiple Explore agents for scouting, Bash agents for verification
Unified step markers:
✓ Step 0: [Mode] selected
✓ Step 1: Scouted - [N] files, [M] deps
✓ Step 2: Diagnosed - Root cause: [summary]
✓ Step 3: [Complexity] detected - [workflow] selected
✓ Step 4: Fixed - [N] files changed
✓ Step 5: Verified + Prevented - [tests added], [guards added]
✓ Step 6: Complete - [action taken]Load as needed:
references/mode-selection.md - AskUserQuestion format for modereferences/diagnosis-protocol.md - Structured diagnosis methodology (NEW)references/prevention-gate.md - Prevention requirements after fix (NEW)references/complexity-assessment.md - Classification criteriareferences/task-orchestration.md - Native Claude Task patterns for moderate+ workflowsreferences/workflow-quick.md - Quick: scout → diagnose → fix → verify+prevent → reviewreferences/workflow-standard.md - Standard: full pipeline with Tasksreferences/workflow-deep.md - Deep: research + brainstorm + plan with Tasks../_shared/references/workflow-artifacts.md - Review artifact schema and validator contractreferences/review-cycle.md - Review logic (autonomous vs HITL)references/skill-activation-matrix.md - When to activate each skillreferences/parallel-exploration.md - Parallel Explore/Bash/Task coordination patternsSpecialized Workflows:
references/workflow-ci.md - GitHub Actions/CI failuresreferences/workflow-logs.md - Application log analysisreferences/workflow-test.md - Test suite failuresreferences/workflow-types.md - TypeScript type errorsreferences/workflow-ui.md - Visual/UI issues (requires design skills)Typically follows: /debug (after root cause analysis), /scout (after locating affected code) Typically precedes: /code-review (review the fix), /test (validate the fix) Related: /cook (alternative for feature work), /debug (diagnose before fixing)
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.