ralph-specum-tasks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited ralph-specum-tasks (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a coordinator, not a task planner -- delegate ALL work to a task-planner sub-agent.
Derive RALPH_CODEX_PLUGIN_ROOT from this loaded skill by resolving two parent directories from the SKILL.md directory. Never derive it from the project working directory.
.current-specrequirements.md and design.mdrequirements.md and design.md. Read research.md when present, .progress.md, and current state.phase_gate.py mode through "$RALPH_CODEX_PLUGIN_ROOT/scripts/phase_gate.py" with STATE and exact --quick, exact --interactive, or no flag. Reject both, -q, variants, and natural-language substitutes.design.md before starting tasks. Exact quick mode continues with the validated artifact.basePath before generation: python3 "$RALPH_CODEX_PLUGIN_ROOT/scripts/prototype_records.py" select-downstream --base-path "$BASE_PATH" --state "$BASE_PATH/.ralph-state.json"gateApproved: true, non-superseded records returned by the selector. Exclude malformed, superseded, skipped, failed, inconclusive, cancelled, and normal-mode excluded records.activePrototypes blocker for tasks. Name the active ID and route resume through $ralph-specum-prototype. Allow proven unrelated prototypes when the selector reports no task dependency.design.md, stale task indexes, or a stale upstream artifact that design depends on. Route to the earliest stale phase and do not plan from stale design.awaitingApproval: false before generation.granularity from state. Allow --tasks-size fine|coarse to override it. Treat task sizing as administration, not an interview question. In exact quick mode, default unset granularity to fine.research.md exists, require skill discovery pass 2 against the goal plus final research. When it is absent, require pass 1 against the goal alone. Run the applicable pass when the state lacks its revision. Select explicitly named skills and record harness-shadowed duplicates."$RALPH_CODEX_PLUGIN_ROOT/skills/interview-framework-codex/SKILL.md", its required algorithm and domain-modeling references, and all selected domain contracts in both interactive and quick mode. In interactive mode, follow the algorithm for critical delivery slicing, dependency order, rollout risk, and verification thresholds. Inspect commands, file layout, and existing test tools instead of asking.approve and delegate; in exact quick mode, record bypassed_quick. In both modes, run phase_gate.py check-delegation with the current loaded-manifest identity before creating the child. Apply the shared hard-transition invariant before task-planner dispatch. A failed check-delegation in either mode ends this invocation before phase transition, child dispatch, or target-artifact write; after a normal-mode failure, the next explicit invocation creates a fresh manifest/interview identity and does not create an alternate quick bypass. After an exact --quick delegation failure, the next explicit invocation reruns discovery, records a fresh phaseSkillLoad and interview identity, and does not reuse a terminal bypassed_quick interview or its discovery revision. Only a matching in-progress collecting or awaiting_confirmation interview is resumable.task-planner sub-agent. Pass the absolute helper path, state path, identity tuple, unique teammate dispatch identity, verbatim manifest, requirements, design, research, selected prototype evidence, the clean blocker/stale-gate result, and interview context. The child reloads and records the manifest, passes check-agent-write with that unique identity, and writes tasks.md. Do NOT write tasks.md yourself.phase: "tasks"awaitingApproval: true (or false when --quick is active)taskIndex: first incomplete or totalTaskstotalTasks: counted tasks.progress.md with the phase breakdown, next milestone, blockers, next step, chosen granularity, skill discovery, and verification strategy.Use atomic tasks with exact file targets, explicit success criteria, verification commands, and commit messages. Preserve POC-first ordering. Support [P] markers for safe parallel work, [VERIFY] checkpoints, and VE tasks when end-to-end verification is part of the plan.
tasks.md, name tasks.md and summarize the task plan briefly.quickMode is false, end with exactly one explicit choice prompt:approve current artifactrequest changescontinue to implementationcontinue to implementation as approval of tasks.md.--quick, do not show this prompt; continue directly to implementation after the gates succeed.apply the changes immediately delegates already-recorded feedback through a new unique dispatch, redisplays the artifact, and stays at this approval gate. Ask one focused change question only when no feedback is pending. Control-only continue, proceed, and go ahead approve nothing.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.