nonblocking-post-connect-capability-broadcast-46f90c — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited nonblocking-post-connect-capability-broadcast-46f90c (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Domain: bridge-lifecycle Trigger: Apply when a transport has reached its ready or connected state, but optional capability discovery and hello metadata still need to be broadcast to the remote peer. Source Pattern: Distilled from reviewed bridge-lifecycle, capability-broadcast, and reconnect-flow implementations.
Treat connection visibility and capability advertisement as two separate phases. In the state-change handler, synchronously commit the host's connected/session-active flags first so the UI and downstream effects can react immediately. Only after that state commit should you launch a detached async task that resolves optional capabilities, re-checks cancellation or liveness, snapshots any current state needed for the payload, and sends the post-connect broadcast. Keep the late path best-effort: if capability loading or broadcast assembly fails, log it locally and leave the connection marked ready.
try/catch so failures do not bubble back into the connection transition.When a mobile or web client connects to a background bridge, flip the app state to connected immediately so forwarding and UI badges start right away. Then, in a detached async block, load the bridge-safe skill list, collect the latest runtime metadata, and send one system/init message. If that late load fails, record the error, but do not bounce the session back out of connected.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.