ralph-specum-research — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ralph-specum-research (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a coordinator, not a researcher -- delegate ALL work to a research-analyst sub-agent.
Derive RALPH_CODEX_PLUGIN_ROOT from this loaded skill by resolving two parent directories from the SKILL.md directory. Never derive it from the project working directory.
.current-spec.claude/ralph-specum.local.md when present./specs.progress.md, current state, indexed codebase context, related specs, and epic context when present.phase_gate.py mode through "$RALPH_CODEX_PLUGIN_ROOT/scripts/phase_gate.py" with STATE and exact --quick, exact --interactive, or no flag. Reject both, -q, variants, and natural-language substitutes."$RALPH_CODEX_PLUGIN_ROOT/skills/interview-framework-codex/SKILL.md", its required algorithm and domain-modeling references, and all selected domain contracts in both interactive and quick mode. In interactive mode, use its focused brainstorming method for critical evidence scope, decision thresholds, and material unknowns. Inspect source availability, code facts, and existing patterns instead of asking.approve and delegate; in exact quick mode, record bypassed_quick. In both modes, run phase_gate.py check-delegation with the current loaded-manifest identity before creating the child. Apply the shared hard-transition invariant before research writer dispatch. A failed check-delegation in either mode stops this invocation before phase transition, child dispatch, or target-artifact write; after a normal-mode failure, only the next explicit invocation creates a fresh manifest/interview identity. After an exact --quick delegation failure, the next explicit invocation reruns discovery, records a fresh phaseSkillLoad and interview identity, and does not reuse a terminal bypassed_quick interview or its discovery revision. Only a matching in-progress collecting or awaiting_confirmation interview is resumable. Exact --quick retains its existing question-and-approval bypass and discovery, manifest, delegation, and writer checks.research-analyst sub-agent. Keep the existing child packet, identity tuple, and receipt behavior unchanged: pass the absolute gate helper path, state path, full identity tuple, unique teammate dispatch identity, verbatim skill manifest, goal, context, and interview results. The sub-agent reloads and records the manifest, passes check-agent-write with that unique identity, and writes research.md. Do NOT write research.md yourself.phase: "research" and awaitingApproval: true (or false when exact --quick is active)..progress.md with the research summary, blockers, learnings, next step, skill discovery, and verification tooling notes when relevant.continue to prototype, treat research.md as approved and route to $ralph-specum-prototype --suggested --return-phase requirements with the same resolved base path. Let that skill own prototype behavior and its return handoff.The result should identify existing code patterns, external references, constraints, related specs, risks, verification tooling, and a clear recommendation for the next phase.
research.md, name research.md and summarize the research briefly.quickMode is false, end with exactly one explicit choice prompt:approve current artifactrequest changescontinue to requirementscontinue to prototypecontinue to requirements as approval of research.md.continue to prototype as approval of research.md and route through $ralph-specum-prototype with returnPhase: requirements.--quick, do not show this prompt; continue directly to requirements after the gates succeed.apply the changes immediately delegates already-recorded feedback through a new unique dispatch, redisplays the artifact, and stays at this approval gate. Ask one focused change question only when no feedback is pending. Control-only continue, proceed, and go ahead approve nothing.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.