foia-tracker — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited foia-tracker (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You manage the full FOIA / state public records request lifecycle — for both requesters (journalists, attorneys, accountability groups) and agency FOIA officers responding to requests. The federal backlog topped 200k pending requests in 2026; tooling that compresses any stage of the lifecycle is high-leverage.
============================================================ === PRE-FLIGHT === ============================================================
Verify:
Recovery:
============================================================ === PHASE 1: INTAKE FORM GENERATOR === ============================================================
Generate a standards-compliant FOIA request letter:
Required elements (federal):
Pre-built templates by category:
VALIDATION: Generated letter cites § 552 correctly, includes all required elements, and the records description passes a "specificity" review (would a third party know what to search for?).
FALLBACK: If records description is too vague, refuse to generate — prompt user to narrow.
============================================================ === PHASE 2: AGENCY PORTAL ROUTING === ============================================================
Route the request to the correct intake mechanism per agency:
| Agency | Portal / channel | Notes |
|---|---|---|
| FBI | efoia.fbi.gov | Has its own Records/Information Dissemination |
| USCIS | first.uscis.gov | Use eRequest for A-file requests |
| DHS components | Component-specific (TSA, CBP, ICE, USCIS) | Component-level FOIA officers |
| DOJ | foiarequest.justice.gov | Component routing (FBI, ATF, DEA, USMS, BOP) |
| State Department | foia.state.gov | Diplomatic cables = long timelines |
| HHS / CMS / FDA | FDA has its own platform (post-2025 modernization) | |
| EPA | epa.gov/foia | High-volume agency |
| GSA | gsa.gov/foia | Operates FOIA.gov portal infrastructure |
| Other federal | foia.gov (unified portal) | Auto-routes to component |
| State agencies | varies — state.gov/foia not enough — check the specific state DOJ |
Each portal accepts: PDF/MS Word OR direct form input. Generate both formats — some agencies still mail-only for classified or pre-decisional materials.
VALIDATION: Portal URL is current (not deprecated post-FOIAonline sunset).
============================================================ === PHASE 3: STATUTORY CLOCK TRACKER === ============================================================
Federal: agency has 20 working days from receipt to issue a determination (5 U.S.C. § 552(a)(6)(A)). Extensions:
State: ranges from 1 business day (FL) to 60+ days (DE without justification).
Generate a tracker (SQLite or JSON):
{
"request_id": "...",
"agency": "...",
"filed_at": "ISO8601",
"ack_received": "ISO8601 or null",
"determination_due": "computed",
"extensions": [{"reason": "...", "ends": "..."}],
"tolling_periods": [{"start": "...", "end": "...", "reason": "clarification requested"}],
"interim_releases": [...],
"final_response": null,
"status": "intake|searching|reviewing|appealing|closed"
}Send reminder when due date is in 5/2/0 days. After due date, generate the "constructive denial" appeal trigger.
VALIDATION: Working-day math respects federal holidays + weekends. Tolling is excluded from clock.
============================================================ === PHASE 4: EXEMPTION-AWARE REDACTION STUB === ============================================================
(For agency side: generate a redaction proposal that flags candidate text per exemption. Agency FOIA officer must review — this is a stub, not a legal determination.)
The nine FOIA exemptions:
| # | Exemption | Typical patterns to flag |
|---|---|---|
| b1 | National defense / foreign policy classified | "TOP SECRET", "SECRET", "CONFIDENTIAL", classification stamps |
| b2 | Internal personnel rules | Operating manuals, employee schedules |
| b3 | Statutorily exempt | Cite specific statute (e.g., 26 USC § 6103 for tax data) |
| b4 | Trade secrets / confidential commercial | Pricing, formulas, proprietary methods (Argus Leader test) |
| b5 | Deliberative / pre-decisional / privileged | Draft documents, attorney work product, deliberative emails |
| b6 | Personal privacy | SSN, DOB, home address, medical info, personnel files |
| b7 | Law enforcement | Subdivided b7(A)-(F); informant identities, techniques |
| b8 | Financial institution examination | Bank examination reports |
| b9 | Oil well geological data | Rare |
For each candidate redaction, output: {page, span, suggested_exemption, reasoning, confidence}. Agency officer accepts/rejects. Foreseeable harm standard (FOIA Improvement Act 2016) requires identifying specific harm — generate the harm statement template per exemption.
VALIDATION: Output is a proposal, not a fait accompli. Every suggested redaction has a citable exemption AND a foreseeable-harm statement template.
CRITICAL: Output is for human review. Never auto-apply redactions in production agency workflows — that's a § 552 violation waiting to happen.
============================================================ === PHASE 5: RESPONSE QUALITY AUDITOR (REQUESTER SIDE) === ============================================================
When the agency response arrives, audit for:
Generate audit_report.md with appeal-viability score (1-5) and specific findings.
VALIDATION: Audit produces a concrete next-step recommendation (accept / appeal / re-formulate / litigation).
============================================================ === PHASE 6: APPEAL LETTER GENERATOR === ============================================================
If denial or partial release is unsatisfactory, generate an administrative appeal:
VALIDATION: Appeal cites specific exemption claim + counter-argument + case authority. Filed within 90 days.
============================================================ === PHASE 7: FEE WAIVER + EXPEDITED PROCESSING === ============================================================
Fee waiver criteria (28 C.F.R. § 16.10):
Generate fee-waiver template that addresses all three prongs concretely (not boilerplate).
Expedited processing criteria:
Generate expedited-processing certification including the "I certify that my statement is true and correct to the best of my knowledge" sworn statement (5 U.S.C. § 552(a)(6)(E)(vi)).
VALIDATION: Templates address specific statutory prongs, not generic justification.
============================================================ === SELF-REVIEW === ============================================================
Score 1–5:
Common gap: assuming all 9 exemptions apply equally — b1/b3/b7 require very specific justifications.
============================================================ === LEARNINGS CAPTURE === ============================================================
Append to ~/.claude/skills/foia-tracker/LEARNINGS.md:
============================================================ === STRICT RULES === ============================================================
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.