create-bug-workflow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-bug-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Thin entry for agent skill discovery. Full procedure: WORKFLOW.md.
When invoked:
Using **create-bug-workflow** to file the bug report.Claude Code shortcut: /create-bug → commands/create-bug.md.
Every must-read file for this workflow, linked directly from here. References already linked above are not repeated.
Read for every run — every filing run uses these:
Read when the run reaches that phase — mandatory at the moment named:
Read when the trigger in the line fires — a Jira target, a design comparison, a non-pass verdict, a stuck step or tool error, session start/end, a timed round:
Read only if the user asks you to reproduce the bug in a browser yourself — create-bug never does this on its own (steps come only from the reporter); hand reproduction to testing-ticket-workflow unless the user insists:
All preconditions and refusal rules are in WORKFLOW.md. MUST NOT create issues until the user approves each draft. MUST re-check the tracker/board first (WORKFLOW Phase B2): a defect a prior/closed ticket already settled as intended behavior is not a bug — report it to the user with the reference link instead of filing.
All close-out gates are in WORKFLOW.md and verify-closing-checklist.md (Create bug section). MUST verify each created issue URL before reporting done.
Run the check for each of these before step 1 — check commands and install hints are in dependencies.md:
gh (GitHub targets)osascript, browser fallback)tools/retest-guard) — only when the workspace carries them; when tools/retest-guard/ is absent, apply the img-width-param rule by hand (embed every image bare, !file.png!) and say sosuperpowers:systematic-debugging~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.