implement-plan-f62748 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited implement-plan-f62748 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Execute an implementation plan file.
At the start, use update_plan to track each step, restating any remaining steps of a parent workflow alongside them:
$implement skillDetermine which plan file to implement using these rules in order:
add-image-cache), resolve to .turbo/plans/<slug>.md if that file exists.turbo/plans/*.md. If exactly one plan exists, use it.turbo/plans/ does not exist but .turbo/plan.md exists, use it$turboplan and stop. When a slug or path was passed but no file matched it, say which one was triedIf multiple plans exist and the most-recent choice is non-obvious (e.g., several plans were modified within the same minute), use request_user_input to let the user pick from the candidates.
State the resolved plan path before continuing, then read the file.
Unless an explicit path or slug was passed, confirm the resolved plan still describes work that remains to be done:
status: is doneWhen you check whether a gate has passed, check each condition it names at its source of record, such as the remote's tags for another repository's release, rather than a local copy.
When a signal fires, output it as text. Then use request_user_input to offer:
.turbo/plans/, then confirm that plan against these same signalsOn Leave it unimplemented, tell the user to bring the plan current with $refine-plan and run this skill again, or, for a plan whose gate has not passed, to run this skill again once it has. Call update_plan to drop the remaining implement steps, restating any remaining steps of a parent workflow, then continue with the next step of the active workflow.
Workflow state lives at .turbo/workflows/<slug>.md — slug from the resolved plan's basename. It pairs one-to-one with the thread's goal. When this run's create_goal attempt succeeds, write the file fresh: Status: active plus this invocation's update_plan list as a checkbox list. When an unfinished goal already exists, mirror into the workflow file its objective names; when it names none, continue without workflow state. Mirror every update_plan call into the file; it holds the pipeline's remaining steps and their statuses. When this run created the goal, run the terminal step in order: mark the final entry completed and mirror it, set Status: closed, mark the goal complete with update_goal, then emit any halt message.
Attempt create_goal with the objective: "Execute the implementation plan at <plan path> through $implement, then set the plan's frontmatter status to done when it has frontmatter. Workflow state: .turbo/workflows/<slug>.md; mirror every update_plan call into it. Loop state lives under .turbo/loops/. After any context compaction, re-read the plan file, the workflow file, and any active ledger, and continue from the first unfinished entry. Mark this goal complete only after that status update, or after $implement completes for a plan without frontmatter." If an unfinished goal already exists, an outer workflow owns it; continue without creating one.
Read in full:
$implement SkillRun the $implement skill. The plan file, its file references, and its Verification section are already in conversation context from Step 1.
After $implement completes, set the plan's frontmatter status: to done. If the plan is the legacy .turbo/plan.md without frontmatter, skip the status update.
When the plan's Context names a larger source it implements part of (an assessment, a backlog, an issue), report the plan's completion separately from that source's: name the source's items the plan left out, and say whether another plan under .turbo/plans/ covers them.
If this run created a goal in Step 1, follow the closing update_plan call below by mirroring it into the workflow file, setting Status: closed, and marking the goal complete with update_goal, in that order.
Then call update_plan to mark this step completed and continue with the next step of the active workflow.
$refine-plan or $draft-plan separately.$implement. Restating steps as a turn-level narration counts as inline execution and bypasses the delegation.git commit, git push, or PR creation, halt before Step 3 and ask the user to remove them via $refine-plan. A Verification item that observes the result of a push without instructing one is not grounds to halt.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.