implement-improvements-087d7d — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implement-improvements-087d7d (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Validate improvements from .turbo/improvements.md, propose a specific working set based on the backlog's actual contents, and run one lane per session: direct, investigate, or plan. Mixing lanes in a single run tangles commits, so the skill processes exactly one lane each time. Entries outside the confirmed working set stay in the backlog for future runs.
At the start, use TaskCreate to create a task for each step:
Read .turbo/improvements.md, relative to the repo root resolved with git rev-parse --show-toplevel, except inside a linked worktree — where git rev-parse --git-dir differs from --git-common-dir — in which case use the parent of the common dir. If the file does not exist, there are no improvements to implement; stop.
Parse all entries, extracting for each:
### heading)direct, investigate, or plan; may be missing in older entries — trivial and standard are accepted as legacy aliases for direct and plan)Improvements drift: files get renamed, code gets refactored, issues get fixed as side effects of other work. Before routing, validate each improvement and settle the Type of any entry whose Type is missing or wrong.
For each entry, verify whether the specific problem or opportunity described still exists. Do not rely on git log alone. Recent commits touching the same files do not mean the specific issue was addressed. Read the actual code and confirm:
Before using a restatement as an entry's summary in Step 3, confirm each fact it adds to the entry against the code, or against the dependency's shipped artifact when the fact concerns a dependency.
Classify each entry as:
When in doubt, classify as Active. The cost of re-examining a resolved issue is low; dismissing a valid improvement is high.
For any Active entry without a Type field, infer one on the fly. For an Active entry whose Type the code read contradicts, correct it. A recorded investigate is contradicted only when the code read settles the question the entry raises. Reading alone does not settle a question that turns on runtime behavior, such as ordering or timing. Base the classification on the code you just read during validation, not just the entry's one-line summary.
/implement./turboplan, which routes the work itself.Pick the type without asking the user. Default to plan when a missing Type is genuinely ambiguous, and keep a recorded Type the code read does not contradict.
Output the backlog status as text first, grouped by type and status. Include each entry's category inline and a category tally across active entries:
## Improvement Backlog Status
### Active (N)
Categories: refactor (N), performance (N), testing (N), docs (N)
**Direct (N)**
- [summary] (category) — [one-line reason it's still relevant]
**Investigate (N)**
- [summary] (category) — [one-line reason it's still relevant]
**Plan (N)**
- [summary] (category) — [one-line reason it's still relevant]
### Deferred (N)
- [summary] — [the revisit condition, and what still has to happen]
### Stale (N)
- [summary] — [one-line reason it's stale]
### Unclear (N)
- [summary] — [what's ambiguous]When no entry is Active, skip the recommendation: a Deferred entry is not a candidate.
Pick one specific working set tailored to the active entries. Read the entries again before recommending and weigh:
/implement run. Investigate dispatches /investigate per symptom, then shares one /implement for the concluded fixes. Plan hands a cohesive cluster to /turboplan, which routes the work itself.State the recommendation as: lane + concrete working set (specific entries or a category-scoped subset) + one or two sentences on why this beats the alternatives. Then list 1–3 honest alternatives, each named with the actual entry or subset (e.g., "investigate the flaky presence test", "plan lane on persist-before-send"). When only one lane has active entries, recommend that lane and skip alternatives.
Use AskUserQuestion to confirm. Combine into the same prompt:
Skip the call when no item applies.
If the user confirmed stale removal, edit .turbo/improvements.md to delete the stale entries.
Rewrite in .turbo/improvements.md each Active or Deferred entry whose path, scope, count, consequence, or Type Step 2 corrected, changing only the fields the correction touches. When that changes an entry's summary, update each Paired with line in its counterpart entries that names the old title.
Compute the working set from the confirmed choice. If the working set is empty, stop.
Read the reference file for the confirmed lane and follow its phases:
State the chosen lane before continuing with the reference file.
Edit .turbo/improvements.md to delete the working-set entries that the lane processed. "Processed" means:
/turboplan wrote, and entries whose fixes were applied in this session. Treat planned entries as processed once the plan is written.Keep any entries the lane re-classified mid-flight (direct → investigate/plan, or investigate → plan), and any entry of which the working set took only one step of several. These stay in the backlog for a future run. Delete the file if no entries remain.
Rewrite in place each kept entry of which the working set took only one step: restate its summary and Where as the steps that remain. When the rewrite changes the summary, update each Paired with line in counterpart entries that names the old title.
Rewrite in place each entry the investigate lane investigated that stays in the backlog: restate its summary and Where as what remains to do, put what the investigation established in its Why (the root cause it confirmed, or the hypotheses it refuted when the cause stayed unresolved), and set the Type the remainder calls for. When the entry waits on an outside event, such as an upstream fix, record that event as its Revisit. When the rewrite changes the summary, update each Paired with line in counterpart entries that names the old title.
When the restated Where names files in another repo, delete the entry in place of rewriting it, drop each Paired with reference to it from its counterpart entries, then run the /note-improvement skill for the entry as restated, with its Category, Type, Why, and any Ceiling or Revisit.
When a processed entry carries a Paired with line, drop that reference from each counterpart entry it names, so no backlog is left pointing at an entry that no longer exists.
.turbo/ is gitignored. Edits to .turbo/improvements.md are local-only and do not need to be staged or committed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.