session-reset — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited session-reset (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Preserve session-specific state in PROMPT.md across a /clear, then restore afterwards.
PROMPT.md captures only session-specific state — current task, method, and progress. Persistent knowledge (user preferences, codebase patterns, dev quirks, workflow lessons) is handled separately by auto-memory and must NOT be included in PROMPT.md.
Check git status for uncommitted changes. If there are any:
Security check — before staging, scan changed files for secrets. Flag and exclude any files matching common sensitive patterns (.env*, *.key, *.pem, credentials.*, *secret*, *.token). Warn the user if any are found and never stage them without explicit confirmation.
Then ask the user:
If the user chooses to commit, use /commit. If they also want to push, push after the commit succeeds.
If the working tree is already clean, tell the user "Working tree is clean — nothing to commit." and move on.
Generate PROMPT.md at the project root by reviewing the current session state. PROMPT.md is ephemeral and must never be committed.
# PROMPT.md
## Current task
<!-- What we're working on - the goal, feature, or fix -->
## Method
<!-- Which workflow/approach is active (e.g. OpenSpec, manual, etc.) -->
<!-- Include any active change IDs, branch names, or tracking references -->
## Progress
<!-- Where we are in the process -->
<!-- What's done, what's in flight, what's next -->
<!-- Any blocking issues or open questions -->Guidelines:
If a team is active (check for team config in $CONFIG_DIR/teams/):
shutdown_request to each teammateTeamDeleteIf no team is active, tell the user "No active team — skipping teardown." and move on.
After teardown, output this message exactly:
Session state saved to PROMPT.md. All agents shut down.
Run `/clear` now, then tell me: **read PROMPT.md**When the user says "read PROMPT.md" after a /clear:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.