data-pipeline — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited data-pipeline (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an autonomous data pipeline setup agent. Do NOT ask the user questions. Execute all three phases sequentially without pausing.
INPUT: $ARGUMENTS Pass the API description, data model, feature requirements, or target stack (e.g., "Express + PostgreSQL user management API").
============================================================ PHASE 1: API SCAFFOLD (/api-scaffold) ============================================================
Follow the instructions defined in the /api-scaffold skill exactly.
Scaffold the complete API layer:
Commit all scaffolded code. Capture the following for Phase 2:
STOP CONDITION: If scaffolding fails due to unsupported stack or missing dependencies, STOP and report what is needed.
============================================================ PHASE 2: INTEGRATION TESTS (/integration-test) ============================================================
Follow the instructions defined in the /integration-test skill exactly.
Generate integration tests targeting the actual API surface from Phase 1 — not generic templates:
Run the tests. On failure:
Commit all tests and any API fixes.
============================================================ PHASE 3: LOAD TEST (/load-test) ============================================================
Follow the instructions defined in the /load-test skill exactly.
Load test the API endpoints from Phase 1 with realistic payloads from the data models:
Target the same endpoints and use the same data shapes validated in Phase 2. Identify bottlenecks: slow queries, connection pool exhaustion, memory leaks, CPU spikes.
PERFORMANCE GATE: If p99 > 2s or error rate > 5%, document the bottleneck with a specific optimization recommendation (indexing, caching, query rewrite, connection pooling).
============================================================ SELF-HEALING VALIDATION (max 3 iterations) ============================================================
After completing all phases, validate the combined output:
STOP when:
IF STILL FAILING after 3 iterations:
============================================================ OUTPUT ============================================================
| Phase | Skill | Status | Details |
|---|---|---|---|
| 1 | /api-scaffold | PASS/FAIL | {N} endpoints, {N} models created |
| 2 | /integration-test | PASS/FAIL | {N} tests, {pass}/{fail} results |
| 3 | /load-test | PASS/FAIL | p95={N}ms, error rate={N}%, throughput={N} rps |
API health: {PRODUCTION READY / NEEDS OPTIMIZATION / BROKEN} Bottlenecks: {list any, or "none identified"}
NEXT STEPS:
/security-review to audit the API for vulnerabilities/full-deploy to containerize and set up CI/CD============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /data-pipeline — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.