agent-context-budget — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agent-context-budget (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Keep the primary session small while lanes do the reading and writing. There is no second budget source: native mode follows the host's limits and the caps written into each brief; harness mode takes every number from the policy referenced by the current TaskCheckpoint. The "roughly 2 KB" in the description says when to use this skill; it is not a limit.
Do not use this skill to summarize away unresolved failures, human decisions, raw scientific evidence, or security findings.
checks run, risks, blockers. Long output goes to a file and the lane returns the path. Raw logs, transcripts, and full diffs never come back inline.
file:line references, not filedumps. Name exact files and line ranges in the brief.
edits, scaffolds, bulk reads), a strong tier for review, verdicts, root-cause analysis, security, and governance. Never switch a lane's model silently after a failure.
then; do not poll.
of starting a fresh one.
Host mechanics (parallel calls, background runs, per-lane model, return schemas) are in native lanes.
Only decision-relevant material:
Keep raw logs and complete artifacts at their paths. Include a short failure excerpt only when the next action needs it.
Write a fresh-session primer: goal, current state, decisions and who made them, open questions, evidence paths, next step. Keep unresolved failures, human decisions, and security findings visible. Compaction changes the active context, not cumulative usage or failure history.
Memory output is proposal-only. Repository state, current evidence, and recorded human decisions outrank memory; recall systems are optional caches. Native mode may write a proposal file and nothing else under .coord/; applying an approved proposal needs the signed approval of harness mode.
.coord/memory-proposals/<proposal-id>.json with animmutable action (operation, target_ref, summary, evidence_refs).
target_ref. A proposalwith no evidence refs stays pending.
rationale, affected action hash, and trusted-host HMAC authorization, lets a proposal be applied. Decline, timeout, and revise are not approval.
.coord/memory.yml.It never edits an existing event; a resolution, correction, or supersession is a new append-only event.
executors never receive the signing key.
Full schema and apply rules: references/coord_memory_schema.md.
Applies when AGENT_COLLAB_POLICY is configured, or a round spans sessions or tools, runs unattended, or must resume.
agent-collab policy validate --policy <policy-ref> --json agent-collab checkpoint validate --checkpoint <checkpoint-ref> --json
number to fit the policy.
agent-collab policy evaluate \ --policy <policy-ref> \ --checkpoint <checkpoint-ref> \ --json
continue with spawn_allowed=true: build the bounded packet.checkpoint: write the checkpoint and primer. A v2 slice withauto_continue advances atomically under the same goal; v1 returns control. For a v2 action-scope context_compaction_required, do local context maintenance without asking for renewed approval: keep full artifacts, acceptance evidence, failures, and authorization; build a smaller linked packet or use native compaction; record measured sizes; re-evaluate. Do not spawn or advance a slice while this gate is pending.
stop or spawn_allowed=false: do not spawn. Respect the v2 scope; anexhausted action still allows safe primary-agent diagnosis.
unavailable, do not start an autonomous loop; prepare packets for human-controlled execution instead.
Multi-cycle loop rules (retry counting, failure identity, no-progress cycles) are in references/harness-loop.md.
Outputs (scratch by default): .coord/context_<NNN>.md (shape in references/harness-loop.md), .coord/session_primer.md, and the updated checkpoint. Promote a checkpoint snapshot only when the repository needs it for resume, shipping, or acceptance evidence. Agent boundaries do not imply commits.
and the host's native limit wins.
capped return that points to the full output is not truncation.
error, or null result remains non-success.
recorded human decisions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.