issue-triage — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited issue-triage (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
find . -maxdepth 1 -name "CLAUDE.md" -type ffind . -maxdepth 3 -name "project-discovery.md" -type fDetermine the issue text from the argument:
Determine the issue type from the report text. Choose exactly one:
From the report, identify:
List what a developer would need to reproduce or investigate this issue that is absent from the report. Common gaps by issue type:
List only what is genuinely absent. Do not list information already present in the report. If nothing is missing, write exactly: None - report has enough to proceed.
Severity (estimate from what is known):
Reproducibility (estimate from what is known):
Omit when inapplicable. Severity and Reproducibility describe a problem that is occurring. When the issue type is Feature Request, Question, or Other and neither is inferable from the report, omit both sections entirely rather than rendering Unknown — the same omit-when-not-inferable pattern Step 5 applies to Suspected Areas. For a Bug, Regression, Performance, or Security issue, always render both (as Unknown if needed); they are core to triaging a problem.
If the report points to a specific system area, list it. Then, only to sharpen those areas, consult project context: if the CLAUDE.md label is non-empty, read it; if the project-discovery.md label is non-empty, read it (it is the richer system map when present). Use them to name relevant areas such as upload pipeline, authentication middleware, database migrations, or frontend state management.
Do not infer areas the report does not point to, and never use project context to supply information the reporter omitted. If both CLAUDE.md and project-discovery.md are absent or empty, or nothing in the report points to a specific system area, omit the Suspected Areas section entirely and continue.
Decide the single recommendation using the issue type from Step 1 and the gaps from Step 3:
Clarify with reporter before proceeding. Otherwise it is /investigate./research — the problem space must be researched before the feature can be specified. Otherwise, if the use case (job to be done) or success criteria are missing, the recommendation is Clarify with reporter before proceeding. Otherwise, if the feature is described but not yet specified, it is /plan-a-feature; if requirements are already specified, it is /plan-implementation./research. Otherwise, if the report plus project context is enough to answer it, the recommendation is Answer the question directly; no han skill needed; if not, it is Clarify with reporter before proceeding.Clarify with reporter before proceeding.Resolve the output path:
$HOME/.claude/triages/{kebab-case-summary}.md, where {kebab-case-summary} is the Step 2 Summary lowercased with non-alphanumeric runs replaced by single hyphens.Run mkdir -p on the directory that will contain the file (for the default, mkdir -p "$HOME/.claude/triages"). Write the report using the template at template.md, filling every section from Steps 1-6 and writing the Step 6 result verbatim into Recommended Next Step. Omit the Suspected Areas section if Step 5 determined nothing is inferable, and omit Severity and Reproducibility per the Step 4 omit rule.
Present the completed triage report to the user. When the Recommended Next Step is a han skill (/investigate, /research, /plan-a-feature, or /plan-implementation), state plainly that this triage report is the handoff document — the operator passes the report itself to that skill rather than re-summarizing the issue. No separate brief is produced; the report already serves as the handoff.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.