domain-template — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited domain-template (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- target: ~850 tokens (empty template — grows when filled in for your project) -->
Purpose: Structured template for capturing company- or project-specific knowledge that no public model can know — architecture decisions, naming conventions, business rules.
Copy this file to skills/<project-name>/SKILL.md and fill in all sections. Delete empty sections. Concrete > comprehensive.
Project name: [e.g. "OrderFlow"]
Technology: [e.g. "Node.js 20, PostgreSQL 15, React 18"]
Deployment: [e.g. "AWS ECS, GitHub Actions CI/CD"]
Team size: [e.g. "4 backend, 2 frontend"]
Main repo: [e.g. "github.com/acme/orderflow"]| Context | Convention | Example |
|---|---|---|
| Database tables | snake_case, plural | order_items |
| API endpoints | kebab-case, plural | /api/order-items |
| TypeScript interfaces | PascalCase, no I prefix | OrderItem |
| Environment variables | SCREAMING_SNAKE_CASE | DATABASE_URL |
| React components | PascalCase | OrderItemList |
These rules are not documented in the code — only here.
Orders under $10 have no shipping costs.The users table has two ID fields: id (internal) and external_id (customer number). Never confuse them.| System | Purpose | Auth Method | Contact for Issues |
|---|---|---|---|
| Stripe | Payments | API key in STRIPE_SECRET_KEY | [email protected] |
| SendGrid | Emails | API key in SENDGRID_API_KEY | [email protected] |
| Term | Meaning |
|---|---|
Order | A confirmed order (status >= CONFIRMED) |
Cart | An unconfirmed order (status = DRAFT) |
Specific instructions for how the agent should work in this project.
Never delete files without explicit user confirmation.Always output the full file path with every change.Always use English in commit messages.Stack-specific gotchas not found in the documentation — only learned through experience.
Prisma Client must be regenerated with npx prisma generate after schema changes — a simple npm install is not enough.The Redis connection pool in production has max 10 connections — with more than 10 parallel requests, requests get dropped.Without domain knowledge, the agent makes plausible but wrong assumptions about naming, business rules, and architecture. With this template filled out once → the agent knows the project like a team member.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.