expert-analysis — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited expert-analysis (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Dispatch N domain experts in parallel via the forge-expert subagent. The agent's system prompt owns the role archetype, citation discipline, return format, and read-only constraints — this skill provides the per-dispatch parameters and orchestrates the parallel call.
path or path:line) the experts should start from. Experts walk the code themselves; the anchor list seeds, it does not bound.references/expert-roles.md.Use as many experts as the feature genuinely needs, capped at 5. The selection is driven by the Step-2 search — every distinct architectural concern surfaced by the search becomes one expert dispatch.
/forge:master-plan spends its budget reconciling overlap.There is no hard floor and no narrow-feature gate. A focused single-expert dispatch is occasionally the right call (e.g. a pure performance question). The cap is the only structural constraint.
MUST invoke Agent once per chosen domain, all calls in a single tool-use block so they run in parallel. For each dispatch:
Agent(
description: "<Domain>: analyze <feature> against codebase",
subagent_type: "forge-expert",
run_in_background: false,
prompt: """
## Domain
<one of: architecture, performance, data-state, ui-ux, security, testing, build-tooling>
## Stack experience
<one-line addendum from references/expert-roles.md "Stack-specific role tuning" — leave empty if stack unknown>
## Feature
<verbatim feature requirements from user>
## Anchor files
- `path/to/anchor1.ext` — <one phrase: why this anchor>
- `path/to/anchor2.ext:42` — <…>
- ...
## Domain authority (omit section if no project skill was loaded in Step 2.3)
<paste the full output of any project skill invoked in Step 2.3 that is relevant to this expert's domain>
<a schema skill's output here means the expert should not re-derive field names or types from file searches — treat this output as authoritative>
"""
)The forge-expert agent's system prompt (in forge/agents/forge-expert.md) carries the role archetype, return format, citation discipline, and read-only constraints. The dispatch prompt only inlines the four sections above. The Agent tool does NOT accept name or max_turns at the call site — the harness silently drops both — so do not add them; the agent's frontmatter is the only effective control.
For the role catalog (which domains apply to which features, stack-specific tuning), see references/expert-roles.md.
Agent calls go in a single tool-use block. Sequential dispatch wastes wall-time and breaks the workflow timing assumptions of /forge:master-plan.maxTurns, tools, and the canonical role / return-format / constraints.file:line citation discipline is what produces grounded output; prefatory context dumps just inflate the prompt.prompt field; it cannot see the orchestrator's prior conversation. Inline the feature text and the anchor list verbatim.Use this path INSTEAD of the Agent template above when BOTH hold (the forge skill's "Deep mode" section owns the gate):
Workflow tool is available in the session (requires Claude Code ≥ 2.1.154). If it is absent, fall back to the standard Agent dispatch above — never block the pipeline on it.In deep mode, MUST invoke Workflow exactly once with the script template in references/workflow-dispatch.md, passing one dispatch prompt per chosen domain via args.dispatches. Each expert runs as agentType: "forge-expert" — same agent, same constraints — but its report is validated against a JSON schema at the tool layer, with automatic retry on malformed output. Expert selection (the cap of 5, the merge rule, user picks) is identical in both modes.
The workflow runs in the background and returns via task notification. WAIT for the result before invoking /forge:master-plan — the reports are the plan's input.
After all experts return, invoke /forge:master-plan to synthesize their reports into a single implementation plan.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.