debug — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited debug (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Always work based on data. Never guess. ALWAYS run as subagent (opus high effort).
A loop you can run, not a plan to read code.
Pick a mechanism — options are ordered by preference, pick the first that fits:
Then optionally wrap it in a strategy — each needs a mechanism underneath to drive:
git bisect run needs a script that exits non-zero on the bug)Do not proceed until all four hold:
Stop rule: if you're reading code to build a theory before that command exists, stop.
Exemption — non-deterministic bugs: when the bug is inherently racy, Deterministic is relaxed to a reproduction-rate floor: the loop must go red in at least ~50% of repeated runs. The other three criteria still hold in full. Raise the rate by looping the trigger, parallelizing, and injecting sleeps into the code under test to widen the race window (this is fault injection, not waiting — the "never sleep, poll instead" rule does not apply). 50% flake is debuggable; 1% is not.
Run the loop now and show the exact command plus its real failing output — never a claim that it fails. Confirm the failure is the user's reported symptom, not a nearby different error (import error, wrong fixture, unrelated assertion). Red for the wrong reason is not a repro — go back to step 2.
Only then shrink to the smallest scenario that still goes red for that same reason. Cut inputs/callers/config one at a time, re-running after each cut. Done when every remaining element is load-bearing. This shrinks the hypothesis space.
Generate 3-5 ranked hypotheses before testing any — single-hypothesis generation anchors on the first plausible idea.
[DEBUG-a4f2], so cleanup is one grepRun the loop from step 2 again — it must go green.
If it still fails: loop back to step 5 — the fix falsified your hypothesis, so re-rank and probe again.
Keep the minimized repro as a regression test, written at the seam that exercises the real bug pattern as it occurs at the call site. If no correct seam exists, that itself is the finding — report it rather than writing a test that gives false confidence.
grep -r the tag from step 6 (if you added logs) and delete every hit, then delete the scaffolding files you created.Portions of this workflow (the feedback-loop ladder and the loop gate) are adapted from Matt Pocock's `diagnosing-bugs` skill (github.com/mattpocock/skills), used under the MIT License.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.