review-plan-c5d9b3 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited review-plan-c5d9b3 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Review a plan against structure and scope criteria. Runs internal reviews and $peer-review in parallel by default. Returns combined structured findings.
.turbo/plans/<slug>.md and read it.turbo/plans/*.md. If exactly one file exists, use it.turbo/plan.md if .turbo/plans/ does not existWhen the plan came from a file, state the resolved path before continuing.
Unless the plan came from conversation text, or an explicit path or slug was passed, check whether the resolved plan still describes work that remains to be done. Report a frontmatter status: of done alongside the path.
Two reference files carry the criteria, one per internal review:
Skip peer review when instructed (e.g., "without peer review", "no peer", "internal only").
When a list of already-adjudicated findings was supplied (one line each: the finding, its verdict, and the recorded reason), include it in every branch prompt, internal and peer, labeled as decisions already reached on proposed revisions rather than as established properties of the plan. Direct each branch to treat a finding as listed when it matches one on both location and substance, to raise such a finding again only on evidence its recorded reason does not already account for, and to judge any other finding at the same location on its own merits.
Pass the plan to every branch, internal and peer, the same way: for a plan that is on disk, name its absolute path and direct the branch to read the file in full; for a plan that exists only as conversation text, include that text.
Run the review branches independently. Launch them with spawn_agent / wait_agent using inherited model defaults, issuing every call in one batch. Do not issue one and await its result before issuing the rest. That is three branches when peer review is active (two internal + one peer), or two branches when peer review is skipped. Every branch prompt must direct it to treat the shared working tree and its git index as read-only and to assess findings by reading and reasoning. Each branch keeps the scratch files it writes, such as its starting git status snapshot, probes, and logs, in a scratch directory of its own, uniquely named under $TMPDIR, and refers to it by absolute path. HEAD stays where it is: read other refs with git show <ref>:<path> rather than git checkout or git switch. For a check that requires mutating code, the branch works in an isolated git worktree created under $TMPDIR and discarded afterward. Refer to that worktree by absolute path in every command and join chained steps with &&, so a failed step cannot leave the rest running in the shared checkout. Run teardown and verification as their own commands. Give that worktree its own dependency install rather than reaching the shared tree's install by any route: removing a worktree deletes through symlinks, and a redirected suite writes into the shared install. When its own install is not possible, the check is left unrun and reported as such. A check that runs in the shared checkout invokes an already-installed runner directly wherever a package-manager wrapper would front it, since such a wrapper reads as read-only while reconciling the shared install before it runs. Confine dependency installs and reconciliation to an isolated worktree. Every test runner the branch starts, in a worktree or in the shared checkout, runs in its own process group under a timeout enforced from outside the runner. Before teardown, the branch stops the process group of every runner it started, since stopping a runner can leave the processes it spawned alive. Afterward the branch verifies that git worktree list no longer shows the worktree, that git status --short shows what it showed at the start, and that HEAD is still on the branch it started on. It also confirms that no process from those groups, and none whose command line names the worktree path, if any, is still running, and reports by PID any process it could not stop. When it cannot list processes, it reports that check as unrun and names those process groups and the worktree path, if any. After any check, in a worktree or in the shared checkout, it verifies that the shared tree's dependency directory still resolves (a destroyed install leaves git status unchanged, since it is gitignored). Damage the branch cannot repair is reported with the exact repair command in place of findings.
~/.agents/skills/review-plan/references/plan-structure-review.md), the output format below, and this directive: read that reference file directly, apply its determination criteria as the bar for a real finding, then report every finding that clears that bar tagged with its priority and with internal (structure). Coverage is the goal at this stage, so surface everything that qualifies and let the priority tags convey severity. The branch must also return the Overall Verdict block for its dimension.~/.agents/skills/review-plan/references/plan-scope-review.md) and findings tagged internal (scope).$peer-review from the installed skill directory, with a request describing: (a) the plan under review, passed as above; (b) the criteria live in ~/.agents/skills/review-plan/references/plan-structure-review.md and ~/.agents/skills/review-plan/references/plan-scope-review.md — the reviewer should read both files directly and cover every criterion in one single-pass review, applying each file's determination criteria and priority scale to the findings in that file's domain; (c) the Overall Verdict should use the Readiness: <ready | needs revision> label; (d) the already-adjudicated findings list when one was supplied, framed as described above. The branch prompt must also state explicitly that the sub-agent's final message must contain the verbatim findings text $peer-review produced.Aggregate findings with attribution (reviewer: "internal" or "peer", each with its "structure" or "scope" dimension). Present them in the output format below.
Then call update_plan to mark this step completed and continue with the next step of the active workflow.
Format each finding as:
### [P<N>] <title (imperative, ≤80 chars)>
**Section:** <plan section>
**Reviewer:** <internal | peer> (<structure | scope>)
<one paragraph explaining the issue and its impact>After all findings, place the Overall Verdict block each internal branch returned for its dimension, then a single combined block for the peer review:
## Overall Verdict: <Structure | Scope>
**Readiness:** <ready | needs revision>
<1-3 sentence assessment>## Peer Review Verdict
**Readiness:** <ready | needs revision>
<1-3 sentence assessment>If there are no qualifying findings, state so and explain briefly.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.