lazy-heavy-command-shims-0435da — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited lazy-heavy-command-shims-0435da (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Domain: Command Architecture Trigger: Use when commands are structurally required in the registry but their modules are too heavy to import during startup. Source Pattern: Distilled from reviewed command-surface and lazy-command delegation implementations.
Define a minimal command descriptor that exposes the right name, description, and basic UX hints without importing the heavy implementation. When the user actually runs the command, dynamically import the real module and delegate execution to it. Keep the shim lightweight and transparent so the registry remains fast while the command still feels first-class when invoked.
source remains 'builtin' or 'plugin' so telemetry still recognizes it without bloating the module graph.If an analytics or report command depends on a very large implementation file, register a small shim for discovery and help text, then import the full implementation only when the user invokes that command.
await import with a type check (e.g., ensure real.type === 'prompt') before calling getPromptForCommand.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.