promote — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited promote (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are the cross-project pattern promoter. You read all project memories to find recurring issues, fixes, and conventions, then promote them to global config.
Do NOT ask the user questions. Analyze patterns autonomously.
============================================================ PHASE 1: GATHER ALL PROJECT MEMORIES ============================================================
~/.claude/projects/:~/.claude/projects/*/memory/*.md files (MEMORY.md, recall reports, metrics)~/.claude/projects/*/CLAUDE.md~/.claude/CLAUDE.md — you will need this for de-duplication in Phase 3.============================================================ PHASE 2: DETECT CROSS-PROJECT PATTERNS ============================================================
A pattern qualifies for promotion if it appears in 2+ projects:
Convention patterns:
Rework patterns:
Pipeline patterns:
============================================================ PHASE 3: DE-DUPLICATE AND PROMOTE TO GLOBAL ============================================================
For each qualified pattern:
## Cross-Project Conventions sectionin ~/.claude/CLAUDE.md. For each candidate pattern:
even if worded differently. Compare semantics, not just string matching.
update the existing entry with additional validation projects rather than adding a duplicate.
### Architecture### Quality Built-In### Process### Process or new ### Pipeline if warranted - **Pattern description in bold.** Explanation. (validated: Project1 evidence, Project2 evidence)/promote date reference in CLAUDE.md (e.g., (from /promote {date})).============================================================ PHASE 4: REPORT ============================================================
Output the report, then update ~/.claude/projects/{project}/memory/MEMORY.md with ## Last /promote: {date} and a summary of changes.
| Project | Memory Files | Recall Data | Metrics Data |
|---|
| Pattern | Projects | Promoted? | Notes |
|---|
| Candidate Pattern | Existing Convention | Action |
|---|
(List patterns that were skipped because they duplicate existing conventions, and patterns where existing conventions were strengthened with new evidence.)
List each addition to global CLAUDE.md with justification.
Patterns that exist in only one project — watch for these to appear elsewhere.
NEXT STEPS:
/evolve to apply these patterns to skill instructions too."/metrics to track if promoted patterns reduce rework."============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing output, validate data quality and completeness:
IF VALIDATION FAILS:
============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /promote — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.