karea — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited karea (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Karea is a keyboard-first task manager for solo developers. This skill teaches Claude Code how to use the Karea MCP server to manage tasks naturally during a coding session.
KA37, KPL12) or by namekarea_doing("task title or ID") to set status to in_progresskarea_create_question(task, "what should X behave like when Y?")karea_add_requisite(task, "tests pass")karea_set_markdown(task, "..." ) or karea_add_note(task, "...")karea_toggle_requisite to tick each closing requisite, then karea_done(task) or karea_close_task(task)karea_quick_task("fix the bug we just found")karea_create_task with title, description, priority (1=critical), category, tags, closingRequisites array, markdown bodykarea_create_subtask(parent, "step 1"), repeatkarea_recap(from, to)karea_link_jira(task, "PROJ-123")karea_create_resource then karea_link_resource_to_taskKA37) over creating duplicatesreview, not done (unless user says done explicitly)karea_delete_*) without explicit user confirmationThe Karea MCP server is configured via .mcp.json in this plugin. Users need an API key from <https://karea.app/dashboard/settings/api-keys> exposed as KAREA_API_KEY. The full tool catalogue (44 tools) is in the plugin README.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.