stacks — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited stacks (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Auto-detects project tech stack and loads domain-relevant context for reviews, audits, planning, and work.
Layer 0: Context Router — computeContextManifest() decides WHAT to load
Layer 1: Detection Engine — detectStack() scans manifests for evidence
Layer 2: Knowledge Skills — 20 reference docs (languages, frameworks, databases, libraries, patterns)
Layer 3: Enforcement Agents — 13 specialist reviewers with unique finding prefixesdetectStack() scans manifest files (pyproject.toml, package.json, Cargo.toml, composer.json) to identify languages, frameworks, databases, and libraries with a confidence score (0.0-1.0).computeContextManifest() classifies changed files into domains (backend, frontend, database, testing, infra, docs), then selects which reference docs and agents to load based on the detected stack and task type.Read() directives to workers and reviewers. Only domain-relevant docs are loaded (e.g., a frontend-only PR won't load Python/SQLAlchemy skills).See detection.md for the full algorithm.
Input: Repository root path Output: { primary_language, languages[], frameworks[], databases[], libraries[], tooling[], confidence, evidence_files[] }
See context-router.md for the full algorithm.
Input: Workflow type (review/audit/plan/work/forge), changed files, detected stack, task description Output: { domains, skills_to_load[], skills_excluded{}, agents_selected[], loading_strategy }
See stack-registry.md for all supported languages, frameworks, databases, and libraries.
| Category | Supported |
|---|---|
| Languages | Python, TypeScript, Rust, PHP |
| Frameworks | FastAPI, Django, Laravel, SQLAlchemy, React, Vue.js, Next.js, Vite |
| Databases | PostgreSQL, MySQL |
| Libraries | Pydantic, dry-python/returns, Dishka, Pinia, Vue Router |
| Patterns | TDD, DDD, DI |
# talisman.yml
stack_awareness:
enabled: true # Master toggle (default: true)
confidence_threshold: 0.5 # Min confidence to activate specialists
max_stack_ashes: 3 # Max specialist Ashes per review
# Override detected stack (monorepos, detection failures)
# override:
# primary_language: python
# frameworks: [fastapi, sqlalchemy]
# Custom project-specific rules
# custom_rules:
# - path: ".claude/skills/my-patterns/SKILL.md"
# domains: [backend]
# workflows: [review, work]
# stacks: [python]~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.