cm-execution-d06428 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cm-execution-d06428 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
cm-planninghandoff/plan.json or openspec/changes/[name]/tasks.mdhandoff/exec.jsoncm-code-reviewRole: Lead Developer. You execute plans systematically with continuous verification and non-blocking status updates.
Follow _shared/autonomy-policy.md. Treat an approved plan as scoped execution authorization through verification. Do not request per-step or per-batch re-approval inside that scope.
Per _shared/helpers.md#Load-Working-Memory. After EACH completed task: _shared/helpers.md#Update-Continuity.
Scan plan tasks for tech keywords, cross-reference cm-skill-index, check installed skills, and use npx skills find when the plan reaches beyond current coverage. If codegraph or cm-codeintell context is available, inject it into agent prompts so execution skips redundant repo searching.
Confirm the authorization state from the handoff, not by asking the user again:
Have an approved plan?
├─ Have 2+ independent tasks where parallel execution helps?
│ ├─ File/dependency analysis and conflict pre-flight pass?
│ │ └─ YES → Mode E (TRIZ-Parallel) ★ recommended
│ └─ Tasks are ordered/dependent and isolated subagents are available?
│ └─ YES → Mode B (Subagent-Driven)
├─ One non-trivial task, want multi-perspective without subagent cost?
│ └─ YES → Mode F (Party, persona rotation)
├─ Multiple independent failures across subsystems?
│ └─ YES → Mode C (Parallel Dispatch)
├─ Autonomous loop with backlog (`/cm-start` flow)?
│ └─ YES → Mode D (RARV)
└─ Otherwise
└─ Mode A (Batch Execution)| Mode | One-line summary | Load |
|---|---|---|
| A | Batch 3 tasks, report, then continue | references/mode-a-batch.md |
| B | Fresh subagent per task + 2-stage review | references/mode-b-subagent.md |
| C | One agent per independent problem domain | references/mode-c-parallel.md |
| D | Reason → Act → Reflect → Verify loop | references/mode-d-rarv.md |
| E | Dependency-aware parallel + per-agent quality gate | references/mode-e-triz-parallel.md |
| F | Single agent rotates Architect → Engineer → Reviewer | references/mode-f-party.md |
Action: Pick exactly one mode, read only that reference, and execute from there.
Before selecting Mode B, verify the harness supports fresh and resumable isolated sessions. If it does not, route to Mode F (reduced review independence) or Mode A; never silently simulate independent reviewers in one context. Mode B is serial. Mode E remains the only mode for independent parallel tasks and always retains conflict pre-flight.
references/persona-dispatch.mdreferences/security-rules.md before writing code| Skill | When |
|---|---|
cm-planning | Produces the plan this skill consumes |
cm-tdd | Use per task when implementing or fixing |
cm-quality-gate | VERIFY phase / pre-report validation |
cm-code-review | Final review after all tasks are done |
cm-design-system | Recommended before frontend-heavy tasks |
| Command | Purpose |
|---|---|
/cm-start | Create tasks + launch RARV + open dashboard |
/cm-status | Quick terminal progress summary |
/cm-dashboard | Open browser dashboard |
Choose your mode → load that one reference → execute the authorized scope → verify → review.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.