search-before-building-46eb47 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited search-before-building-46eb47 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Before implementing new functionality, verify it does not already exist and that the best option has been considered.
Run in order. Stop when you find a satisfactory answer.
Search the current codebase before anything else:
rg "<keyword>" src/ lib/ --type ts --type js -l
rg "<keyword>" --glob "*.py" -lCheck: Does equivalent logic already exist? Is it importable as-is, or would it need wrapper work?
Search the relevant registry for the project language:
| Language | Registry | Search method |
|---|---|---|
| TypeScript/JS | npm | npm search <keyword> or npmjs.com |
| Python | PyPI | pip index search <keyword> or pypi.org |
| Go | pkg.go.dev | web search site:pkg.go.dev <keyword> |
| Rust | crates.io | cargo search <keyword> |
Score each candidate:
Check whether an MCP server already provides this capability:
# List currently configured MCP servers
cat .mcp.json 2>/dev/null || cat ~/.claude/settings.json | grep -A5 '"mcpServers"'Check the Agent Powerups catalog for MCP configs:
apx list --type mcp-configIf a server covers the need, prefer configuring it over writing code.
Before adopting a package, verify:
npm audit / pip-audit / cargo audit)| Finding | Action |
|---|---|
| Exact match in repo | Reuse — import and use; refactor only if the interface is incompatible |
| Exact external match, acceptable risk | Adopt — install and use directly; do not wrap unless the API is hostile |
| Partial match | Wrap — install, write a thin adapter; keep the adapter < 50 lines |
| Multiple weak matches | Compose — combine 2–3 small packages; document why |
| No suitable option | Build — write custom code; document the gap search found |
This check is mandatory before:
If time-boxed, spend at most 5 minutes on Steps 1–2 before deciding.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.