branch-and-task-management — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited branch-and-task-management (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Domain skill for starting work: branch setup, context loading, and task decomposition.
NO CODE BEFORE CONTEXT. Read the issue, load the history, understand the scope — then create the branch.
Starting a branch without loading issue context leads to misaligned implementations and wasted effort.
Before creating a branch, confirm:
Follow project conventions from settings or CLAUDE.md:
DEFAULT_BRANCH=$(gh repo view --json defaultBranchRef --jq '.defaultBranchRef.name' 2>/dev/null || echo "main")
git fetch origin "$DEFAULT_BRANCH"
git checkout -b "feature/issue-{N}-{desc}" "origin/$DEFAULT_BRANCH"Branch naming patterns (from settings.json → conventions.branchPatterns):
feature/issue-{N}-{desc} — New featuresfix/issue-{N}-{desc} — Bug fixesdocs/issue-{N}-{desc} — DocumentationKeep {desc} to 3-5 words, kebab-case, meaningful.
Fetch issue details in parallel:
# Parallel: issue details + comments + linked issues
gh issue view $N --json title,body,labels,assignees,milestone
gh issue view $N --commentsExtract from issue body:
- [ ] item becomes a taskBefore implementation, identify affected areas:
# Search for related code
grep -r "keyword_from_issue" --include="*.{rb,js,ts,py}" -l
# Check recent changes in related areas
git log --oneline -10 -- "path/to/related/"Map acceptance criteria to likely file changes. Flag if the issue touches:
Convert acceptance criteria to tasks using TaskCreate:
For each acceptance criterion:
TaskCreate(
subject: "Implement: {criterion summary}",
description: "Acceptance criterion: {full text}\nLikely files: {paths}\nVerification: {how to check}"
)Rules:
Identify tasks that can run concurrently:
If agent teams are enabled and >5 acceptance criteria with independent file sets → suggest team dispatch.
Create {JOURNAL_DIR}/issue-{N}.md (journal dir defaults to .decisions/):
# Decision Journal: Issue #{N} — {title}
**Issue**: #{N} | **Branch**: {branch-name} | **Started**: {YYYY-MM-DD}
---The autonomous-workflow skill governs ongoing journal entry format (Init/Log/Summarize).
Branch setup is valid when:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.