Inforcer Baseline Alignment — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Inforcer Baseline Alignment (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Inforcer's central idea: each managed tenant is measured against an assigned security baseline (a template of policy settings). The gap between the tenant's deployed state and that baseline is drift. This skill covers listing baselines, reading alignment scores, and — most importantly — pulling the per-policy alignment details that show exactly where a tenant has drifted.
Read api-patterns for headers, region, the envelope, and pagination, and tenant-management for resolving a tenant to its integer Client Tenant ID. Every alignment/policy call is tenant-scoped by that integer id.
inforcer_baselines_listList the security baseline templates defined in Inforcer. Returns baseline objects (id, name, and the policy settings each baseline prescribes). Baselines are the "golden" definition a tenant is compared against.
inforcer_baselines_list()inforcer_alignment_scoresRead the alignment score for a tenant — the headline measure of how closely the tenant matches its assigned baseline.
inforcer_alignment_scores(clientTenantId=1423)Use this for the at-a-glance "how aligned is this tenant?" answer. Score classification (aligned / semi-aligned / drifted) is threshold-driven — see compliance-reporting.
inforcer_alignment_detailsPull the per-policy drift breakdown — the detailed list of how each policy in the tenant compares to the baseline. This is where you see which policies are aligned and which have drifted, not just the aggregate score.
inforcer_alignment_details(clientTenantId=1423)Returns, per policy, the baseline-expected state and the tenant's actual state so you can pinpoint exactly what diverged. This is the primary input to any drift report.
inforcer_tenant_policies_listList the deployed policy state for a tenant (read-only). Shows what policies are actually in place on the tenant, independent of the baseline comparison.
inforcer_tenant_policies_list(clientTenantId=1423)Use this to inspect the tenant's real configuration when an alignment detail is ambiguous, or to confirm what is actually deployed.
| Finding | Why it matters |
|---|---|
| Low alignment score | The tenant has drifted materially from its baseline; investigate inforcer_alignment_details |
| Policy present in baseline but absent on tenant | A required control was never deployed or was removed |
| Policy deployed but with weaker settings than baseline | Silent weakening — looks "configured" but doesn't meet baseline |
| Many small drifts vs one critical drift | Triage by control impact, not count — one missing MFA/identity control outweighs many cosmetic diffs |
| Tenant with no assigned baseline | Nothing to measure against; alignment is meaningless until a baseline is assigned |
ctid = resolve("Acme") # integer Client Tenant ID
score = inforcer_alignment_scores(clientTenantId=ctid)
details = inforcer_alignment_details(clientTenantId=ctid)
drifted = [p for p in details if p['aligned'] is False]Start from the score for the headline, then read alignment_details to list the drifted policies. Cross-reference inforcer_tenant_policies_list when you need the tenant's actual deployed value for a policy.
For each tenant from inforcer_tenants_list, pull inforcer_alignment_scores, then drill into inforcer_alignment_details only for tenants below an alignment threshold. This keeps the sweep cheap while still surfacing the per-policy detail where it matters. Page continuationToken to completion on every list.
full detail, but you cannot deploy a policy, remediate the drift, or restore configuration through the API. Those actions exist only in the Inforcer UI — surface them as recommendations, never as something this plugin performs.
names such as aligned and the exact alignment_details shape are illustrative and credited to royklo/InforcerCommunity.
tenant with no baseline assigned cannot be scored.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.