debug-sop — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited debug-sop (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Capture the exact symptom, expected behavior, reproduction command, relevant inputs, environment, first known bad state, and whether fixing is authorized. Return a compact incident report with reproduction, root cause or surviving hypotheses, evidence, changed files if any, verification commands, and the failure-ledger id.
mcp__memory__match_signatures with the exact error plus the operationthat triggered it. Read matching resolutions, but verify they still apply.
because a familiar exception suggests an easy fix.
data-specific, or dependent on ordering/timing.
and request the needed authority or choose a non-mutating probe.
Git state, and dependency locks before declaring it gone.
List plausible causes and, for each, the cheapest observation that would distinguish it. Prefer direct evidence in this order:
Change one explanatory variable at a time. Do not use destructive Git reset or discard unrelated user work during bisection.
Reduce the case until removing one condition removes the failure. For data or statistical failures, also check leakage, seed sensitivity, stale code/config, and baseline-budget mismatch. For integration failures, verify each boundary separately: executable discovery, configuration loading, process startup, protocol exchange, shared workspace/state path, then UI behavior.
If multiple causes remain possible, say which evidence is missing instead of choosing the most convenient story.
For a diagnosis request, stop after proving the cause and proposing a scoped fix. For a requested repair:
Run the minimal reproduction first, then the focused regression tests, then the repository-required broader checks. Verify the original user-visible path, not only the helper function. For intermittent failures, repeat enough times to make the remaining uncertainty explicit.
Call mcp__memory__record_failure with:
trigger: operation and preconditions;symptom: exact externally visible failure;root_cause: proven mechanism, not a guess;resolution: change and verification command;If unresolved, record the diagnostic evidence and surviving hypotheses rather than inventing a root cause.
run controlled repetitions.
upstream error, and provide a safe retry or fallback.
evidence, and return to the hypothesis list.
the exact user input or external change needed.
Debugging is complete when the symptom is reproducible or its absence is explained, the root cause is supported by discriminating evidence, any authorized fix passes the original reproduction and regression checks, and the failure ledger contains enough detail for the next agent to avoid repeating the investigation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.