implement-ed9e6a — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implement-ed9e6a (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Standard implementation flow: load style rules, make the change, run post-implementation QA.
At the start, use TaskCreate to create a task for each step:
/code-style skill/preview skill for UI/UX changes/finalize skill/code-style SkillRun the /code-style skill to load mirror, reuse, and symmetry rules before editing.
Scan the work for types that match available skills, matching against the richest context available: a plan's Implementation Steps if a plan is in conversation context, otherwise the user request, a prior skill's task description, or an improvement entry. For each unambiguous match, run the skill via the Skill tool. For example, if the work includes "add a Drizzle migration" and a skill exists whose triggers reference Drizzle migrations, load it. If a work type has no matching skill trigger, do not load a generic skill.
If unsure, do not load.
Apply the change described by the current context — the user request, a prior skill's task description, or an improvement entry. Keep the edit scoped to what the context describes. If the scope balloons beyond what the context specified, stop and confirm scope before continuing.
If a Verification section is in conversation context (e.g., from a plan file), execute the commands, smoke checks, or MCP tool invocations it specifies. If a check fails, run the /investigate skill. If a check is blocked by a dependency, unclear requirement, or environmental issue, use AskUserQuestion to surface the blocker and let the user choose how to proceed. If no Verification section is in context, skip this step.
/preview Skill for UI/UX ChangesIf the change touches a user-facing surface (UI components, styles, templates, markup, user-facing routes or screens), run the /preview skill so the user can try it firsthand before QA. When it is unclear whether the change is user-facing, use AskUserQuestion to ask whether to preview rather than skipping silently. Skip this step for changes with no user-facing surface (backend-only, CLI, library, build or config).
/finalize SkillRun the /finalize skill.
Then use the TaskList tool and proceed to any remaining task.
git commit, git push, and PR creation to Step 6..turbo/ content (filenames, requirement IDs, shell references, headings) in code or comments. .turbo/ is gitignored, so these references would be opaque to anyone reading without local copies.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.