writing-sap-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited writing-sap-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill enforces correct construction of v3.0 behavior-shaping skills so that no skill ships without iron laws, a rationalization table, pressure testing, and a workflow chain — the four pillars that separate behavior-shaping code from documentation.
description field is what the routing engine uses for skill selection. It must describe WHEN to use the skill, not WHAT the skill does. A summary in the description teaches the agent to shortcut the full skill.This is the most important distinction in the entire methodology.
## Estimation Approach
SAP estimation should use three-point estimation with optimistic, realistic,
and pessimistic scenarios. Always include risk buffers of 10-30%.The agent reads this, nods, and gives a single number anyway. Nothing in the text prevents the wrong behavior.
## Iron Laws
1. NEVER GIVE A SINGLE NUMBER. ...
## Rationalization Table
| Agent Will Try To... | Counter |
| Give a single number | "The user asked for a quick answer" → Iron Law 1: Always a range. Period. |
## Red Flags
- "This should take about..." → You're giving a single number. Stop.
<HARD-GATE>
DO NOT produce an estimate until each work package has an optimistic,
realistic, and pessimistic day count. No exceptions.
</HARD-GATE>The second version makes it structurally impossible to skip the range — the agent must pass the Hard Gate, which requires three numbers per item.
For every section you write, ask: "Could an agent read this and still skip the step it's meant to enforce?"
If yes: the section is documentation. Add a Hard Gate, Iron Law, or Red Flag that physically blocks the skip.
Every process skill MUST contain these sections, in this order:
---
name: skill-name
description: [Trigger conditions only — when this skill activates. Never summarize the workflow.]
persona: [Primary consultant personas this skill serves]
phase: [SAP Activate phase: Discover / Prepare / Explore / Realize / Deploy / Run]
---Description field rules:
Use when estimating effort, timelines, or complexity for SAP work items, sprints, phases, or full projects.Provides structured estimation with decomposition, complexity factors, and three-point ranges.# Skill Title
This skill enforces [specific behavior] so that [specific failure mode] cannot occur.The one-liner must state what the skill ENFORCES, not what it teaches.
3–5 non-negotiable rules. Use imperative language. All-caps for the core prohibition:
## Iron Laws
1. **NO [ACTION] WITHOUT [PREREQUISITE].** [One sentence explaining the consequence of violating this.]
2. **NEVER [FORBIDDEN ACTION].** [One sentence explaining why this seems harmless but isn't.]Rules of thumb for Iron Laws:
The rationalization table is the diagnostic engine of the skill. It pre-emptively blocks shortcuts:
## Rationalization Table
| Agent Will Try To... | Why It Seems Reasonable | Why It Fails | Counter |
|---|---|---|---|
| [Specific skip] | "[Exact reasoning the agent uses]" | [Specific failure this causes] | [Named gate or law that blocks it] |Rules for the rationalization table:
Phrases the agent should catch in its own reasoning — a self-monitoring trigger list:
## Red Flags
Watch for these phrases in your own reasoning — each one signals you are about to violate an Iron Law:
- "[Exact phrase]" → [What Iron Law this violates]. Stop.Rules for Red Flags:
A Hard Gate is a blocking condition expressed as a structured prerequisite list:
<HARD-GATE>
DO NOT [proceed to next step / produce deliverable / claim completion] until ALL of the following exist:
1. [Specific evidence item]
2. [Specific evidence item]
</HARD-GATE>Rules for Hard Gates:
Numbered steps with mandatory evidence and gate conditions:
## Checklist
### Step N: [Action Name]
[What to do and why]
Evidence: [Specific artifact that proves this step is done]
Gate: [Condition required before proceeding to the next step]Rules for checklists:
The exact format of the skill's output:
## Deliverable Template
\`\`\`markdown
# [Document Title]
## Section 1
[Structure with placeholder labels showing what belongs here]
| Column A | Column B | Column C |
|----------|----------|----------|
| [value] | [value] | [value] |
\`\`\`Rules for deliverable templates:
[Module Name], not generic [value]## Verification
This skill is complete ONLY when ALL of the following are true:
- [ ] [Specific verification item — named artifact or measurable condition]
- [ ] [Specific verification item]
**Evidence required:** [Specific artifacts that must exist]
If any verification item is not met, the skill is NOT complete. Do not claim completion.Rules for verification sections:
## Next Skill
After completing this skill, invoke: `[skill-name]`
Conditions for handoff: [When the handoff fires — do not make it vague]For branching chains:
After completing this skill, invoke one of:
- `skill-a` — When [specific condition]
- `skill-b` — When [specific condition]## Cross-References
- `skill-name` — [One-line description of when/why to cross-reference]Rules: Use skill names only — never @ links that force-load the referenced skill's full content.
Full anatomy as above. Word count target: under 800 words for content, under 30 words for description.
Defining characteristic: Produces a deliverable. Has a Hard Gate before the deliverable step. Has a Verification section that requires the deliverable to exist.
---
name: module-name
description: [Trigger conditions — when the agent needs module-specific knowledge]
---
# Module Name Reference
## Content Routing
| Topic | Section |
|-------|---------|
| [Topic] | [Section heading] |
## [Section 1]
[Content]
## [Section 2]
[Content]Defining characteristic: No deliverable. No checklist. Content routing table at the top so the agent loads only the section it needs. No hard word count limit.
Combines a process checklist with reference content. Uses content routing to separate the two. Example: clean-core-strategy has a process checklist for evaluating clean core compliance AND reference tables for tier definitions.
Every process skill must be tested against these scenarios before shipping. For each scenario, record what the agent tried to skip, how it justified it, and whether the skill's gates caught it.
Adversarial prompt: "I don't need the full process — just give me a rough [estimate / gap list / risk register]." What to test: Does the skill enforce the full checklist despite the request for brevity? Failure mode: Agent produces a "quick" output that skips decomposition, evidence collection, or verification. Hardening target: Iron Laws and Hard Gate must block partial output.
Adversarial prompt: "I'm pretty sure this is a Gap. Just confirm and move on." What to test: Does the skill require independent validation rather than anchoring to the user's guess? Failure mode: Agent validates the user's framing without running its own analysis. Hardening target: Rationalization table entry: "Anchor to user's conclusion."
Adversarial prompt: "The client is waiting. We don't have time for the full process today." What to test: Does time pressure override Hard Gates? Failure mode: Agent bypasses evidence-gathering steps under time pressure. Hardening target: Hard Gate must be explicit that it cannot be skipped regardless of timeline.
Adversarial prompt: Provide a plausible but incorrect answer as context. "This is probably a configuration fit, right?" What to test: Does the agent anchor to the planted assumption? Failure mode: Agent confirms the wrong answer rather than running the diagnostic. Hardening target: Red Flag entry: "This is probably..." → Run the checklist independently. Stop.
Adversarial prompt: "We ran this process on the last S/4HANA project — just use the same approach." What to test: Does the agent assume repeatability across projects? Failure mode: Agent copies outputs from memory rather than executing the skill steps against this project's context. Hardening target: Red Flag: "Based on similar projects..." → Similar ≠ same. This project's data matters.
Adversarial prompt: "I've already done the analysis. Just generate the deliverable." What to test: Does the skill allow out-of-order execution? Failure mode: Agent produces a deliverable without evidence that the prior steps were completed by the skill's standards. Hardening target: Hard Gate requires specific evidence items from prior steps before the deliverable step.
Adversarial prompt: "This looks complete enough. Can we call it done?" What to test: Does the agent allow premature completion? Failure mode: Agent claims completion before the Verification section is satisfied. Hardening target: Verification section must be the final gate. The agent must enumerate each checkbox before closing.
Before submitting any new or reworked skill, verify every item below:
description frontmatter contains ONLY trigger conditions (no workflow summary)@ links)knowledge/ layer)This skill is complete ONLY when ALL of the following are true:
Evidence required: The completed skill file with all sections populated, plus a brief pressure test log noting which scenarios were run and what rationalizations were observed.
If any verification item is not met, the skill is NOT complete. Do not claim completion.
After completing this skill, invoke: verification-before-completion Conditions for handoff: The new skill file has been written and all anatomy sections are present. The verification-before-completion skill confirms the deliverable is complete.
using-sap-superpowers — Governs skill routing; the system map lives hereverification-before-completion — Final gate before any skill is considered donespecs/skill-methodology.md — Full methodology including skill development lifecycle and token efficiency rules~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.