grill-docs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited grill-docs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<what-to-do>
Relentlessly interrogate me on every aspect of the plan until we reach a shared understanding. Walk every branch of the design tree, resolving dependencies between decisions one by one. For each question, offer your recommended answer.
Ask one question at a time, waiting for feedback on each before moving on.
If a question can be answered by exploring the codebase, explore it instead of asking.
</what-to-do>
<supporting-info>
While exploring the codebase, also look for existing documentation:
In most repositories there is a single context:
/
├── CONTEXT.md
├── docs/
│ └── adr/
│ ├── 0001-event-sourced-orders.md
│ └── 0002-postgres-for-write-model.md
└── src/If the root contains CONTEXT-MAP.md, the repository has multiple contexts. The map indicates where each one lives:
/
├── CONTEXT-MAP.md
├── docs/
│ └── adr/ ← system-wide decisions
├── src/
│ ├── ordering/
│ │ ├── CONTEXT.md
│ │ └── docs/adr/ ← context-specific decisions
│ └── billing/
│ ├── CONTEXT.md
│ └── docs/adr/Create files lazily — only when there is something to record. If there is no CONTEXT.md, create it when the first term is resolved. If there is no docs/adr/, create the directory when the first ADR is needed.
When the user uses a term that contradicts the language already captured in CONTEXT.md, flag it immediately. "Your glossary defines 'cancellation' as X, but you seem to mean Y — which is correct?"
When the user uses fuzzy or overloaded terms, propose a precise canonical term. "You said 'account' — do you mean Customer or User? They are different entities."
When domain relationships are being discussed, stress-test them with concrete scenarios. Invent scenarios that probe edge cases and force the user to pin down the boundaries between concepts.
When the user asserts how something works, check whether the code agrees. If you find a contradiction, point it out: "Your code cancels the entire Order, but you just said partial cancellation is possible — which is correct?"
When a term is resolved, update CONTEXT.md immediately. Do not batch — record as you go. Use the format from CONTEXT-FORMAT.md.
Do not tie CONTEXT.md to implementation details. Include only terms meaningful to domain experts.
Only propose creating an ADR when all three of the following hold:
If any of the three is missing, skip the ADR. Use the format from ADR-FORMAT.md.
</supporting-info>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.