go — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited go (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Script path fallback: qq scripts are invoked as bare commands (e.g.unity-test.sh). If "command not found", use${CLAUDE_PLUGIN_ROOT}/bin/<command>instead.
Respond in the user's preferred language (detect from their recent messages, or fall back to the language setting in CLAUDE.md).
Entry point for the qq development workflow. Detects your current state and guides you to the right skill.
This skill is a controller, not an implementation engine. It should read real project state first and only fall back to prompt/context heuristics when the state is ambiguous.
qq-project-state.py is available, you must run it before inspecting git history, branch divergence, commit counts, or repo-wide document context.qq-project-state.py returns valid JSON, treat it as the primary source of truth.work_modepolicy_profilerecommended_next/qq:go into a repo audit. It is a router.Arguments: $ARGUMENTS
--auto: mode-aware automation, no prompts--no-worktree: skip automatic worktree creation for this invocationBefore routing to any skill, ensure the session is in an isolated worktree. This runs automatically — the user does not need to pass any flags.
Skip ONLY if one of these is explicitly true:
git rev-parse --show-toplevel matches an entry in git worktree list other than the main repo root)--no-worktree token in arguments (not "semantically meant" — agent-invented bypass is forbidden)/qq:changes, /qq:deps, /qq:explain, /qq:brief, /qq:full-brief, /qq:timeline)Do NOT invent other skip conditions. If you encounter an obstacle (untracked plan, dirty tree, ephemeral context), fix the obstacle, don't skip the safety check. See the obstacle/fix table in /qq:execute Section 1 for the canonical list — same rules apply here.
If you skip, state the exact reason in your first message (e.g. "Skipping worktree: user passed --no-worktree" / "Skipping worktree: routing to read-only /qq:explain"). No silent skips.
Create worktree procedure:
SOURCE_PROJECT (needed for seeding later) SOURCE_BRANCH=$(git rev-parse --abbrev-ref HEAD)
SOURCE_HEAD=$(git rev-parse HEAD)demo-loop-closure)EnterWorktree tool with name: <slug>. This switches session CWD to .claude/worktrees/<slug>/. If EnterWorktree is not available (non-Claude-Code host), fall back to ${CLAUDE_PLUGIN_ROOT}/bin/qq-worktree.py create --name <slug>, then tell the user to reopen the session in the new worktree path and stop.EnterWorktree is documented as "based on HEAD" but sometimes branches from the repo's default branch (develop/main) instead of the current feature branch, silently losing recent commits. Verify and recover: if git merge-base --is-ancestor "$SOURCE_HEAD" HEAD 2>/dev/null; then
echo "✓ Worktree includes source HEAD"
else
echo "✗ BUG: worktree branched from wrong ref. Resetting to $SOURCE_HEAD"
git reset --hard "$SOURCE_HEAD"
fiCherry-pick is NOT a sufficient recovery — it brings commits over but leaves the branch's merge-base wrong.
.qq/state/worktree.json metadata that marks it as qq-managed): ${CLAUDE_PLUGIN_ROOT}/bin/qq-worktree.py seed-local-runtime --project . --source "<SOURCE_PROJECT>"Without this, scripts/platform/detect.sh is missing and every qq script call exits 127, and downstream consumers (commit-push Type B closeout, qq-codex-exec --add-dir, qq-project-state.py) see isManagedWorktree=false.
sourceWorktreePath from the same file and persist runtimeCacheSeed state back. Pass NO --source flag: ${CLAUDE_PLUGIN_ROOT}/bin/qq-worktree.py seed-runtime-cache --project .Then continue to State Detection and routing below.
Assess the current situation in this order:
/qq:plan to create an implementation plan?"/qq:design to flesh it out into a full design doc?"/qq:execute to start building?"/qq:add-tests to add targeted coverage for this code, /qq:best-practice to inspect it, or /qq:test to run existing tests?"/qq:add-tests to author the smallest useful coverage first?"work_mode once state is loaded:prototype → "Prototype mode is active. Skip design/plan unless you want them; build directly and keep compile green."feature → "Want to start with /qq:design to write a game design doc, or skip straight to /qq:plan for a technical implementation plan?"fix → "This sounds like a bug or regression path. Let's lock down the repro first, then make the smallest fix."hardening → "Hardening mode is active. Keep the scope tight and expect test/review/doc-drift before push."If qq-project-state.py is available, run it first:
qq-project-state.py --prettyUse that structured state as the primary routing signal.
Interpretation:
work_mode first. qq supports four working modes:prototype → default light. Skip formal docs unless the user already wrote them.feature → normal retainable feature work. Design/plan/review/test are expected.fix → reproduce first, then minimal repair + regression verification.hardening → stability-sensitive work such as risky refactors or release prep. Expect tests, review, and doc/code consistency checks.policy_profile. It is not the same thing:core → keep the verification floor low.feature → expect at least targeted validation before acting like the task is done.hardening → even if the task mode is light, expect tests/review/doc-drift before ship-like steps.modeRecommendedNext to understand the raw task-path suggestion.recommendedNext as the actual next step after compile/test blockers and policy-profile pressure are applied.recommended_next:/qq:plan → a design exists; recommend turning it into an implementation plan./qq:execute → a usable implementation plan exists; recommend building./qq:best-practice → feature-mode code exists; run the lightweight review path first./qq:add-tests → author or update targeted regression/EditMode/PlayMode coverage before validation./qq:test → validate the changed area or rerun a failing path before advancing./qq:claude-code-review → hardening-mode code is ready for a heavier review pass./qq:doc-drift → hardening-mode code is ready; check docs match behavior before shipping./qq:commit-push → current mode's required checks are already satisfied./qq:changes → prototype work is compiled; capture keep/drop/observe before moving on.verify_compile → do not escalate yet; make sure the latest C# changes actually compiled.fix_compile → compile is red; stay here until it is green.prototype_direct → prototype mode with no blocking artifacts. Tell the user to build directly, keep compile green, and avoid forcing design/plan.reproduce_bug → fix mode with no active patch yet. Tell the user to lock down a repro before changing code./qq:design/qq:plan/qq:execute/qq:add-tests; otherwise suggest /qq:best-practice or /qq:test/qq:commit-push/qq:best-practice to check them?"/qq:test before pushing?"Important: git/branch heuristics are a fallback only. If project state exists, do not do this layer by default.
→ Ask: "What are you working on? You can give me a design doc, a one-liner, or tell me what stage you're at."
--auto ModeSkip all questions. Read project state first, then choose the lightest valid path for the active work_mode.
Before routing to the first skill, initialize auto-pipeline tracking:
qq-execute-checkpoint.py pipeline-start --project . --type feature --current-skill "<FIRST_SKILL>" --branch "$(git branch --show-current)"--auto/qq:test falls back to batch mode when Unity Editor is not running).prototype/qq:execute --auto/qq:plan --autofeature/qq:design --auto/qq:plan --auto/qq:execute --auto/qq:add-tests --auto/qq:test --auto/qq:commit-pushfix/qq:add-tests --auto/qq:test --autohardening/qq:add-tests --auto when coverage is still missing, then /qq:test --auto → /qq:claude-code-review --auto → /qq:doc-drift --auto → /qq:commit-pushwork_mode before suggesting process-heavy steps--auto)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.