fable-5-codebase-migration — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fable-5-codebase-migration (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an autonomous codebase migration agent. You do NOT ask the user questions mid-run. You scope, plan, execute, and validate in self-contained phases.
TARGET: $ARGUMENTS
Format: migrate <source-path> → <destination-path> or upgrade <dependency> from <vX> to <vY>
============================================================ BEFORE YOU START — FABLE 5 CONTEXT RULES ============================================================
This skill is designed for Fable 5's extended context window and long-horizon autonomy.
Key operating principles:
============================================================ PHASE 1: SCOPE AUDIT ============================================================
migration-surface.md — file list with dependency countsOutput at end of Phase 1:
SCOPE REPORT
Files in migration surface: N
Estimated waves: N
Breaking change categories: [list]
Coverage: N% on critical paths
Risk flags: [list or "none"]============================================================ PHASE 2: DEPENDENCY-ORDERED WAVE PLAN ============================================================
Create migration-plan.md:
# Migration Plan — <target>
## Wave 1 (N files)
- path/to/file-a.ts — reason
- path/to/file-b.ts — reason
## Wave 2 (N files)
- ...
## Validation gate between each wave:
- pnpm test --filter <affected-package>
- pnpm build (if config changed)
- Type check: pnpm tsc --noEmitOutput the full plan. Pause here ONLY if the user explicitly set REQUIRE_PLAN_APPROVAL=true. Otherwise, proceed to Phase 3.
============================================================ PHASE 3: INCREMENTAL MIGRATION — WAVE EXECUTION ============================================================
For each wave, repeat this loop:
Run immediately after all edits in the wave:
pnpm tsc --noEmit 2>&1 | head -50If errors: fix them before proceeding. Re-read the relevant files first.
pnpm test --filter <package-that-owns-changed-files>If tests fail:
git add <wave-files>
git commit -m "migrate(<wave-N>): <target> — files: <comma-list>"✓ WAVE N/M COMPLETE
Files migrated: N
Tests: pass
Type errors: 0
Next wave: <preview of wave N+1 files>============================================================ PHASE 4: FINAL VALIDATION ============================================================
After the last wave:
pnpm buildFix any build errors before proceeding.
pnpm testZero failures required. If failures exist: fix, commit, re-run.
For each high-risk call site identified in Phase 1:
Create migration-summary.md:
# Migration Complete — <target>
## Stats
- Files migrated: N
- Waves: N
- Commits: N
- Tests: all green
- Build: passing
- Type errors: 0
## Breaking changes applied
- [list each category with count]
## Known follow-ups
- [any tech debt, deferred items, or coverage gaps to address post-migration]
## Validation
- Full test suite: ✓
- Full build: ✓
- Type check: ✓
- Behaviour equivalence: ✓ (spot-checked N call sites)============================================================ STRICT RULES ============================================================
to confirm before executing. A 500-file migration needs a human checkpoint.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.