otto — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited otto (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Inspired by established agentic design/planning/build workflows.
Otto is a unified workflow with three artifacts in sequence:
design.mdplan.mdbuild.mdDefault output path:
.agents/tasks/<YYYY-MM-DD>-<feature-short-name>/
flowchart TD
A[User request] --> B[Explore repository context]
B --> C{Scope fits one task?}
C -- No --> D[Decompose into smaller task]
D --> B
C -- Yes --> E[Design stage]
E --> F[Write design.md]
F --> G{User approves design?}
G -- No --> E
G -- Yes --> H[Plan stage]
H --> I[Write plan.md]
I --> J[Score Design+Plan Confidence]
J --> K{User approves plan?}
K -- No --> H
K -- Yes --> L{Confidence >= 95% and no hard-fails?}
L -- Yes --> M[Ask autobuild prompt]
L -- No --> N[Autobuild unavailable; continue gated mode]
M --> O[Branch, commit design+plan, push]
N --> O
O --> P{Pre-build gate passes?}
P -- No --> Q[Block build and resolve]
Q --> O
P -- Yes --> R[Build stage]
R --> S[Score Build Confidence]
S --> T{Build Confidence >= 90%?}
T -- No --> U[Manual phase-by-phase mode]
T -- Yes --> V[Automated phase execution]
U --> W[Execute phase with fresh validation]
V --> W
W --> X{Validation passes?}
X -- No --> Y[Pause, fix or clarify]
Y --> W
X -- Yes --> Z[Update plan.md and build.md]
Z --> AA[Commit and push phase]
AA --> AB{More phases?}
AB -- Yes --> S
AB -- No --> AC[Final summary]Before starting Design, read:
design.md at the run path.design.md.Design output must include:
Before starting Plan, read:
design.md as source of truth.plan.md, self-review it, and ask user for approval.Plan requirements:
Planning protocol details live in PLANNING-PROTOCOL.md.
Otto tracks two confidence scores.
Purpose: governs whether Autobuild mode can be offered.
Threshold behavior:
>=95% and no hard-fails, ask exactly:Confidence is X%. Do you want to run in autobuild mode?<95%, state explicitly that Autobuild is unavailable below threshold.Rubric details live in CONFIDENCE-RUBRIC.md.
Purpose: hard gate for build execution readiness.
<90%: do not run automated build execution. Fall back to manual phase-by-phase mode.>=90%: automated phase execution is allowed.After user approves plan.md, Otto must automatically:
gh auth status when the repository is hosted on GitHub.gh repo view --json nameWithOwner,url when available.<feature-short-name>.design.md and plan.md exist in run directory.chore: add initial design.md and plan.md files for feature "<feature-short-name>"gh repo view or git ls-remote --heads origin <feature-short-name>.Use git CLI for local branch, commit, and push operations. Use gh for GitHub repository lookup, authentication checks, PR/issue lookup, and remote confirmation.
If any of these fail, Build is blocked until resolved.
Build executes the approved plan.md and writes evidence to build.md.
Before starting Build, read:
For each phase:
>=90%.plan.md.plan.md after validation passes.build.md.>=90%.Before running validation, read scripts/README.md if the stack is unclear or the default validator does not match the repository.
scripts/validate-phase.sh: validates linter, formatter, type checks, and tests for common stacks.scripts/README.md: script usage and expected behavior.The workflow is complete when:
build.md is complete and current.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.