agent-acceptance-gate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-acceptance-gate (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The read-only check between "the lanes are done" and "commit or push". It reconciles results, runs the triggered presets, and returns a verdict. It never merges, commits, retries, or turns a decline, cancellation, timeout, or failure into success. Since 0.6.0 it includes the former agent-output-reconciler.
TaskCheckpoint and latest PolicyDecision;Historical provider fields may be read for migration only. Current checks use lane or task ids and roles.
Validate the plan, checkpoint, and policy before anything else. An unreadable configured policy, plan, or checkpoint is a fail-closed blocker: stop and report it. Do not infer missing policy values.
null, declined, cancelled,timed-out, degraded, and failed as distinct states. Never invent an absent result.
why. A completed prose result is not null just because an optional structured-output step failed.
transitive changes separately; unexplained drift is FAIL.
task-content evidence review. Stale or wrong-task evidence stays unverified. Account for pre-existing dirty state and parallel writers before attributing a change. File times alone cannot prove or disprove success.
evidence is unverified.
dependency-order violations.
Report shape: references/reconciliation_template.md. Harness mode writes it to scratch; native mode keeps it short in the conversation or PR body.
| Trigger in the diff | Preset |
|---|---|
| two or more locale variants of one file stem | multi-locale-mirror-sync |
| new catalog or listing entries | catalog-entry-add |
| a named frontier model with a benchmark number, release date, or license claim | fact-check-frontier-models |
Presets are declarative review contracts in presets/, not an executable engine; follow their checks. They add to independent review and source verification and never replace them. If a triggered preset cannot run, report a blocker or an explicit degraded state, never PASS. Structural parity (heading counts, line counts, ordering) is not content parity: check meaning adversarially and quote the passages that disagree.
command on the merged result. Never invent missing criteria; mark manual checks as manual.
verified locally.
immutable acceptance record. Never overwrite a prior run or human decision.
PR body.
All numeric budgets and retry limits come from the canonical policy in harness mode or from the host in native mode. This skill and its presets do not copy default values.
PASS: every required check passed and no blocker remains. Technicallyacceptable; not authorization to merge.
CONDITIONAL PASS: deterministic checks passed, but an explicit humanaction, a degraded optional check, or a documented non-blocking condition remains.
FAIL: any required criterion, scope, policy, evidence, preset, or blockercheck failed.
A human may approve a documented exception, but the original gate record stays unchanged. The new decision records gate, actor, decision, timestamp, rationale, and affected action hash. An override never rewrites a failed test into a passing one. Existing authorization may already cover delivery; do not ask again just because a review, session, or slice ended. A genuinely new human gate still needs a separate recorded decision bound to the specific affected action.
references, and the action hash that any later human decision binds to.
Coordination scratch is gitignored by default. Promote only an explicitly required checkpoint snapshot, shipping artifact, or acceptance record. See references/acceptance_checklist.md for the verification taxonomy.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.