abf-dabfa4 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited abf-dabfa4 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
CRITICAL: ABF MCP tools are available and MUST be your default for all code exploration. Usingread_file,grep_search, orlist_dirwhen ABF tools exist is always wrong.
abf_chunk (by symbol) or abf_symbols firstabf_search (exact/keyword/semantic modes)abf_project_overview or abf_dependenciesabf_search mode: "semantic" or abf_file_summary| What you want to do | CORRECT tool | WRONG approach |
|---|---|---|
| Understand the project | abf_project_overview | list_dir + reading package.json |
| Find a function/class definition | abf_search mode: exact | grep_search |
| Read a specific function | abf_chunk symbol: "name" | read_file entire file |
| See what a file exports | abf_symbols | read_file + manual scan |
| Find files about a topic | abf_search mode: keyword | multiple semantic_search calls |
| Trace what a file imports | abf_dependencies | grep_search for import statements |
| Who calls this function? | abf_impact symbol: "name" | grep_search with manual filtering |
| Understand project style | abf_conventions | reading eslint + tsconfig + prettier |
| Get context around a file | abf_context_bundle | 5–10 read_file + abf_symbols calls |
| Search file descriptions | abf_file_summary | no native equivalent |
| Git history / blame / diff | abf_git | run_in_terminal with git commands |
| Index status or rebuild | abf_index | nothing |
1. abf_project_overview ← ALWAYS first — architecture, stack, entry points
2. abf_conventions ← style, patterns, naming before writing anything
3. abf_search (keyword mode) ← find relevant files for the task1. abf_symbols (file) ← see all exports/functions first
2. abf_chunk (symbol: "name") ← read exactly the function you need
only use read_file if you need the ENTIRE fileabf_context_bundle (entry file, depth: 2)
← full source of entry + signatures of all deps in ONE call
← replaces 5–10 read_file callsabf_impact (symbol: "functionName")
← ALL files and lines that reference it — never skip thisExact name known? → abf_search mode: "exact"
Exploring a concept? → abf_search mode: "keyword"
By file purpose? → abf_file_summary (searches LLM descriptions)
Semantic match? → abf_search mode: "semantic"abf_project_overviewReturns tech stack, frameworks, entry points, folder structure, language distribution, architectural patterns. Required params: none Use it: at the start of every new task in an unfamiliar codebase.
abf_searchmode: "exact" — ripgrep regex, returns matching lines with contextmode: "keyword" — ranks every file by keyword density, best for explorationmode: "semantic" — embedding similarity (requires Ollama index)path_filter — narrow scope (e.g. "src/**/*.ts")abf_chunkRead a specific function/class without loading the full file.
symbol: "functionName" → returns the full body of that symbolchunk_index for a specific sectionabf_symbolsAll exports, functions, classes, interfaces in a file with line ranges. Call this before abf_chunk to see what's available.
abf_context_bundleBiggest token saver. Returns entry file + signatures/source of all its imports in one call.
include: "smart" (default) — full source for entry, signatures for depsinclude: "full" — full source for everythingfocus_symbol — only follow imports relevant to one functiondepth: 0–4 — how far to follow the import graphabf_dependenciesReturns both imports (what this file uses) and reverse dependencies (who imports this file).
abf_impactAll files and specific lines that reference a symbol. Always call before modifying a function, class, or exported type.
abf_conventionsDetected naming patterns, design patterns, folder structure conventions — with confidence scores and examples.
abf_file_summaryFull-text search across LLM-generated file descriptions (FTS5/BM25 ranked). Use when you want to find files by purpose, not by exact code text.
match_mode: "or" (default) — broader resultsmatch_mode: "and" — stricter matchingabf_gitStructured git output — no terminal needed.
action: "log" — recent commitsaction: "file_history" — commits touching a fileaction: "blame" — line-by-line authorshipaction: "diff" — staged, unstaged, or between commitsabf_indexaction: "status" — index health and file countaction: "rebuild" — full re-indexaction: "update" — incremental updateaction: "summarize" — generate LLM summaries (requires Ollama)abf_pingReturns server version and project root. Use to verify ABF is connected.
abf startabf_search returned nothing, abf_chunk didn't find the symbol), fall back to native tools for that specific lookup. Do not skip ABF preemptively — only fall back _after_ ABF has been tried.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.