finalize-3e6e52 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited finalize-3e6e52 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Post-implementation QA workflow: tests, code polishing, commit, and self-improvement.
At the start, use update_plan to track each phase, restating any remaining steps of a parent workflow alongside them:
$polish-code skill$simplify-docs skill$update-changelog skill$self-improve skillWorkflow state lives at .turbo/workflows/<slug>.md — slug from the governing plan when one is in context, otherwise the current branch name with non-alphanumerics replaced by hyphens. It pairs one-to-one with the thread's goal. When this run's create_goal attempt succeeds, write the file fresh: Status: active plus this invocation's update_plan list as a checkbox list. When an unfinished goal already exists, mirror into the workflow file its objective names; when it names none, continue without workflow state. Mirror every update_plan call into the file; it holds the pipeline's remaining steps and their statuses. When this run created the goal, run the terminal step in order: mark the final entry completed and mirror it, set Status: closed, mark the goal complete with update_goal, then emit any halt message.
Then attempt create_goal with the objective: "Run $finalize post-implementation QA on the staged changes through Phase 5 (Ship It). Workflow state: .turbo/workflows/<slug>.md; mirror every update_plan call into it. Loop state lives under .turbo/loops/. After any context compaction, re-read the workflow file and any active ledger, and continue from the first unfinished entry. Mark this goal complete when Phase 5 finishes." If an unfinished goal already exists, an outer workflow owns it; continue without creating one.
$polish-code SkillRun the $polish-code skill for the current changes.
$simplify-docs SkillRun the $simplify-docs skill on the staged changes (git diff --cached). Stage any edits it makes before continuing.
$update-changelog SkillRun the $update-changelog skill. Stage any edits it makes before continuing.
$self-improve SkillRun the $self-improve skill for the current session. Always run this phase even if the session seemed routine.
Examine the staged changes and evaluate whether they form a single reviewable unit or several independently reviewable units. This step decides only whether to split; the chosen ship skill owns all repository-state detection and the commit, push, branch, and PR intent.
Run git diff --cached --stat and git diff --cached to understand the scope. Categorize changes along three dimensions:
A split is warranted when the staged changes contain multiple reviewable units. Each unit should be independently understandable, testable, and revertable. When deciding group boundaries, consider whether a reviewer could evaluate each group without needing context from the others.
Output the split analysis as text.
If changes form a single cohesive unit, note this and run the $ship skill.
If changes span multiple reviewable units, propose an ordered list of groups. For each group, specify:
Use request_user_input to let the user choose whether to ship the changes together or split them up.
$ship skill$split-and-ship skillIf this run created a goal, follow the closing update_plan call below by mirroring it into the workflow file, setting Status: closed, and marking the goal complete with update_goal, in that order. Then call update_plan to mark this step completed and continue with the next step of the active workflow.
.env, credentials, API keys). Warn if detected.git diff internally as needed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.