operon-mine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited operon-mine (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
operon-setup is the one-time onboarding skill. operon-mine is the recurring loop: every few weeks (or when the user mentions a new recurring task), run a mining pass to surface fresh patterns.
has recurred since I last mined."
operon mine.Do not use this for first-run onboarding — use operon-setup instead.
operon doctor --jsonIf auth.tokenPresent is false, point them at operon-setup. Do not try to mine without auth — mine won't upload drafts to the platform without a valid token.
Default mining window is 30 days. If the user mined recently and just wants the new stuff, that's right. If they want a broader sweep (after a sabbatical, after onboarding a new tool, etc.), widen it:
operon mine --since 90d
operon mine --since 180d
operon mine --since 365dWider windows take longer but surface stable patterns that didn't quite clear the threshold in a 30-day window.
For interactive review:
operon mine --since 30dFor agent-driven flow (recommended when an assistant is driving):
operon mine --since 30d --yes --json--yes accepts every default; --json outputs the candidate list as a single JSON object on stdout.
The JSON shape is:
{
"input": 412,
"kept": 287,
"clusters": 14,
"dryRun": false,
"candidates": [
{
"slug": "review-pr",
"uses": 12,
"spanDays": 14,
"score": 0.91,
"suggestedTools": ["Read", "Bash", "WebFetch"],
"existing": "new"
}
]
}existing tells you how each candidate compares to what's already published in the workspace:
new — never publishedsame — already published, no diffchanged — already published, but the draft differsunchecked — couldn't compare (offline / no workspace)After mining, drafts auto-upload to https://app.withoperon.com/<workspace>/candidates. From there the user can edit, polish, and publish each draft.
Or pipe straight into operon-publish — call that skill next if the user wants to ship one of the new drafts immediately.
~/.claude/, ~/.codex/, ~/.cursor/.Nothing leaves the laptop without explicit consent.
fingerprint, draft prompt) uploads to the platform's private Drafts slot — visible only to the user who mined them.
sees opaque session IDs.
operon config set candidates.cloudReview false keeps thefull mining flow local; no drafts upload.
installed. Tell them to install at least one and retry.
Suggest a wider --since window.
rate limiting hits the draft-upload step. The local on-disk drafts under ~/.operon/candidates/ are still authoritative.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.