validate-profile — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited validate-profile (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Wraps the CLI's profile validator so a contributor can check ~/.neurodock/profile.yaml (or any other path) against the canonical schema at packages/core/schemas/profile.schema.json and see field-by-field errors instead of generic YAML noise.
Authoritative inputs:
packages/core/schemas/profile.schema.jsonpackages/cli/src/types.ts (ProfileV01)docs/decisions/0004-profile-schema-design.md~/.neurodock/profile.yaml.nd profile sync so a malformed profile is caught locally.want to see all the other things that are wrong in one pass.
packages/core/schemas/profile.schema.json.--path <file> argument, elseNEURODOCK_PROFILE env var, else ~/.neurodock/profile.yaml.
packages/core/schemas/profile.schema.json.
path.to.field: <message> on its own line.hooks or CI.
From the repo root:
pnpm --filter @neurodock/cli run --silent dev profile validateValidate a specific file:
pnpm --filter @neurodock/cli run --silent dev profile validate --path ./profiles/adhd.yamlCI / scripting (JSON output):
pnpm --filter @neurodock/cli run --silent dev profile validate --format jsonDefault human format:
profile: ~/.neurodock/profile.yaml
schema: packages/core/schemas/profile.schema.json (v0.1.0)
preferences.max_chunk_size: must be <= 9 (got 12)
guardrails.rumination_window_minutes: must be integer (got "ninety")
neurotypes: at least one of [adhd, asd, ocd, audhd, dyslexic, none] required
3 violationsExit 0 on clean, 1 on any violation.
work_hours.start > work_hours.end iscaught by the schema's oneOf, but timezone correctness is not).
profile validate subcommand is present underpackages/cli/src/commands/profile.ts; if it errors with "unknown command", rebuild the CLI with pnpm --filter @neurodock/cli build first.
Lead with the first violating field; no preamble. The output is read by a contributor who is already debugging — they want to see what's wrong, not hear that "validation completed successfully" 14 times. Stay quiet on clean runs.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.