audit-quality-gates — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited audit-quality-gates (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Operate on project rooted at current working directory. Refuse when no build manifest is present.
Do not edit, create, delete, or rename any file. Do not modify build or install dependencies. Do not wire anything new into task graph.
Identify language ecosystem and build system from manifest first. Enumerate every style checker and static analyzer already configured. Record each tool's enabled rule set, threshold settings, and failure mode.
Compare each tool's current config against strictest practical preset. List every disabled rule. Check build's failure threshold for each tool. Flag any tool whose violations build tolerates.
Detect every suppression in source tree. Count them per tool. Surface count as weakness.
Read every Markdown file under sibling demands/ directory. Treat each demand file as authoritative. Produce one report entry per demand file. Do not invent new demands or skip existing ones. Do not merge two demands into single finding. Mark every demand as covered, partially covered, or missing.
Produce single Markdown report. Deliver it to user. Structure report with three sections. Include per-tool section and per-demand coverage section. End with prioritised list of suggested improvements. Name exact configuration file, key, and target value. Do this for every suggested improvement.
Do not run build, invoke any linter, or execute any test. Do not call any tool that mutates caches or lockfiles. Do not commit, push, or open pull request. Do not run any other skill from this bundle. Stop after delivering report.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.