operon-publish — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited operon-publish (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
After operon mine runs, each detected pattern lands on the user's disk under ~/.operon/candidates/<slug>/ and uploads to their workspace's private Drafts slot at https://app.withoperon.com/<workspace>/candidates. This skill walks an AI assistant through helping the user pick one of those drafts and publish it to their team.
operon mine (or operon setup) and are looking at3–5 candidates wondering which to publish.
operon doctor --jsonIf auth is missing, run operon setup first. If sources is empty, the user doesn't have Claude Code / Codex / Cursor installed yet — stop and tell them.
Two equivalent paths — pick whichever fits the conversation:
CLI:
operon list --jsonOutput is an array of candidate summaries with slug, score, uses, spanDays. Drafts also live on the platform at https://app.withoperon.com/<workspace>/candidates — surface that URL to the user if they want to read each draft in a browser.
Sort by score descending and show:
1. review-pr (score 0.91, 12 uses across 14 days)
2. migrate-down (score 0.84, 8 uses across 9 days)
3. ship-hotfix (score 0.77, 6 uses across 11 days)Ask which one to publish. Don't pick for them — these are their prompts, they know which one feels real.
The mined draft is rough — auto-extracted from session content. If the user has ANTHROPIC_API_KEY set, offer to refine it:
operon polish <slug>This rewrites the draft using Claude with the original exemplar sessions as context (those bodies stay on the user's laptop).
If ANTHROPIC_API_KEY isn't set, you can polish from the web Drafts dashboard instead — there's a "Polish with Claude" button that uses Operon's platform key. Surface the URL:
https://app.withoperon.com/<workspace>/candidates/<slug>operon publish <slug>Report the resulting URL back to the user. It'll look like:
https://app.withoperon.com/<workspace>/<slug>Their teammates can now operon install <workspace>/<slug> to drop it into their own Claude Code / Codex / Cursor.
If the publish step fails, parse stderr for the https://withoperon.com/docs/cli/errors#<slug> link:
operon login.operon setup or pass--workspace <slug> to publish.
v0.1.0; subsequent publishes auto-bump the patch.
team. To publish privately (only the minersees it), pass --visibility private.
~/.operon/candidates/<slug>/ is left aloneafter publish — the user can re-mine over it any time.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.