instrument — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited instrument (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A deliberate pass to make opaque code observable — distinct from logging code you happen to be editing. The user points at a target; you light up its seams with leveled logs and timing spans, then verify it still runs and the output is useful.
entry points plus the slowest or most failure-prone paths. State what you're about to instrument before you touch anything.
slog, alog/logger import) and match it and its format. Only fall back to leveled console / the logging module if there is none. Never sprinkle console.log into a structured-logging codebase.
nothing broke and show a sample of the new log output — don't claim it works without it.
debug behind LOG_LEVEL / DEBUG. Don'tflood hot paths at info.
result out.
cache hit age=2h, falling back to X).debug.<scope> <what> in <ms>. The timing matters as much as the message.[parse], [upload:retry].bodies. Log shapes / counts / ids / lengths instead.
const t0 = performance.now();
console.debug(`[sync] start entity=${entity} files=${files.length}`);
const r = await sync(files);
console.info(`[sync] done entity=${entity} ok=${r.ok} in ${(performance.now() - t0).toFixed(1)}ms`);t0 = time.perf_counter()
log.debug("[parse] start file=%s bytes=%d", path, len(buf))
result = parse(buf)
log.info("[parse] done file=%s fields=%d in %.1fms", path, len(result.fields), (time.perf_counter() - t0) * 1000)Full rule: rules/log-everything.md in this repo.
info — measure once around the loop.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.