sdd — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sdd (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use first for Spec-Driven Development, Spec Kit, specs, requirements, design docs, task breakdown, Kiro-style work, implementation from a spec, or ambiguous planning-to-code work.
Pick the smallest lane that preserves intent, traceability, and proof. Tiny work stays light; ambiguous, risky, cross-boundary, orchestration, or LLM-heavy work cannot jump straight to code.
PowerShell: use $env:PLUGIN_ROOT for $PLUGIN_ROOT command paths.
Preflight when a repo path exists:
python3 "$PLUGIN_ROOT/scripts/sdd_surface_audit.py" <repo> --jsonBefore major edits state: LANE, EVIDENCE_PROFILE, source-of-truth paths, assumptions/open questions, next gate, and proof.
basic: local low-risk change; one focused proof.standard: normal feature/bugfix; requirements/tasks plus reproducible check or smoke path.strict: cross-module, contract/user-visible, inferred brownfield, LLM-generated, or orchestrated work; require traceability and evidence ledgers.regulated: safety, compliance, financial, privacy, security, credentials, migrations, or high-impact data; require stronger proof, formal/model evidence when feasible, or explicit risk acceptance.tiny-direct: local, low-risk, clear. Use 3-line mini-spec: intent, non-goal, proof. Never use for ambiguous/cross-boundary/security/privacy work.spec-kit: .specify/, GitHub Spec Kit, specify, /speckit.*, $speckit-*, or constitution -> specify -> plan -> tasks -> analyze -> implement.kiro-lite: .kiro/specs/ or requirements.md + design.md + tasks.md.brownfield-gap: desired behavior depends on existing code; mark inferred behavior [TO VERIFY].bugfix-spec: meaningful regression risk; capture current/expected/unchanged behavior, root-cause hypothesis, regression proof.change-proposal: cross-repo, API-breaking, migration-heavy, security/privacy-sensitive, or deployed behavior contract change; use OpenSpec-style current/proposed sections when present.orchestrated-implementation: many independent tasks with explicit boundaries, dependencies, per-unit proof; profile must be strict or regulated.sdd-spec-kit: Spec Kit setup/lifecycle.sdd-specify: requirements/spec writing.sdd-plan-tasks: design, planning, contracts, quickstart, tasks.sdd-implement: task execution.sdd-audit: traceability/completion review.## SDD Route
- LANE: <lane>
- EVIDENCE_PROFILE: basic | standard | strict | regulated
- SOURCE_OF_TRUTH: <paths>
- ARTIFACTS: <paths>
- BLOCKERS: <none or concrete blockers>
- NEXT: <focused skill/workflow step>
- PROOF: <validator or expected verification>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.