silevy-reply — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited silevy-reply (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cross-platform reply/comment drafting. Auto-routes to the correct platform ruleset based on input.
| Input | Mode |
|---|---|
| GitHub Issue/PR number or link | GitHub mode |
| Reddit comment text/screenshot | Reddit mode |
| Twitter/X content | Twitter mode |
| Other platforms or unspecified | General mode (applies universal principles) |
| Context | Definition | Core Strategy |
|---|---|---|
| Your turf | You are the maintainer / OP / author | Deliver information |
| Someone else's turf | You are a visitor | Contribute experience first, then ask; no self-promotion |
| Cold DM | Zero prior relationship, you're reaching out | Reference their specific content to build trust |
After receiving a number/link, use gh commands to read the Issue/PR body and existing comments to understand the full context.
Output sendable text. Put strategic reasoning after the reply.
Closing an Issue: Fixed in #77.
Confirming a Bug: Yeah this is real. Will add a per-agent semaphore.
Feature Request: Makes sense. Tracking in #XX.
Asking About Use Case: What's the use case driving this?
Code Review: Left a few comments. Main thing is [specific issue].
Merging a PR: LGTM, merged.
| Scenario | Strategy |
|---|---|
| External bug report | Confirm the issue + fix plan/status, optionally ask about use case |
| External PR (good quality) | Substantive technical feedback, can ask about use case after merge |
| External PR (poor quality) | Point out specific problems, no vague encouragement |
| Feature request | Decide yes/no, state conclusion, link to tracking issue |
| Repeat contributor | Can ask about use case, don't be overly enthusiastic |
| Low-value issue | Close with one sentence explaining why |
Prohibited:
Tone examples:
Bad:
I maintain open-multi-agent, a TS multi-agent framework. We took a similar approach to what you're describing. @alice I'm curious how you solved X? @bob I'd also love to know about Y?
Good:
Same problem in a TS multi-agent orchestrator. [describe the specific shared problem]. @alice how much effort did X take to build?
Example 1: Closing a bug issue + asking about use case (#72)
Fixed in #77.
>
Good catch on the token budget interaction btw. What are you using this for? Would be useful to know.
Example 2: Asking a repeat contributor about their use case (#71)
Thanks for the second PR. What's the use case driving this?
Example 3: Joining a discussion under an AutoGen issue (microsoft/autogen#7487)
Same problem in a TS multi-agent orchestrator. Coordinator handles decomposition and synthesis but nothing checks goal alignment in between. Blind spot by design.
>
@msaleme how much engineering effort did the separate integrity node take to build and maintain? Wondering if this is a weekend project or a full team commitment.
Key points: First paragraph contributes experience without self-identification. Second paragraph asks one question with clear information value (quantifying the workaround cost).
Example 4: Feature request + inviting a PR (#124)
Bad (three-part AI smell: confirm problem → restate solution → list asks):
Real gap. onTrace shows a tool ran but not what went in/out, so debugging means digging into model server logs.>
Proposal looks right: addinput: Record<string, unknown>andoutput: stringtoToolCallTrace, pass them inemitTrace. Mirrors whatToolCallRecordalready exposes.
>
Want to send a PR? Two asks if you do: - Keep both fields required, no opt-in flag - Add assertions in tests/trace.test.ts covering success and error casesGood (real maintainer):
Makes sense. Want to PR this? Just add coverage in tests/trace.test.ts for both success and error.Key points: The submitter already spelled out the change, so don't restate the problem or the solution. Just agree, invite the PR, and inline one constraint. Multiple short constraints collapse into prose, no bullets needed.
Execute via gh issue comment or gh pr comment.
| Category | Reply? | Criteria |
|---|---|---|
| Technical question | Yes | Asks about specific implementation, usage, or architecture |
| Real user feedback | Yes | Has actually used the product |
| Positioning/differentiation question | Yes | "How is this different from X" |
| Usage question | Yes | How to install, configure |
| Favorable argument/analogy | Maybe | Someone backing you up; brief acknowledgment |
| Positive recognition | Maybe | Enthusiastic ones get a short thanks, lukewarm ones skip |
| Pure attack/mockery | No | No substantive content |
| Legal/copyright discussion | No | Anything you say will be used against you |
| Self-promotion piggyback | No | Promoting their own project |
| Memes/spectating | No | No substantive content |
| Off-topic | No | Irrelevant |
#### u/username (subreddit) priority
> Original comment quote
**Suggested reply:**
> Reply content
**Rationale:** Strategic intentSummarize no-reply decisions in a table:
| User | Content Summary | Why Not Reply |Brief summary of overall sentiment, trends, and notable signals.
Reddit users are extremely sensitive to AI-generated text. These rules apply on top of the universal blocklist:
Bad (AI smell):
Great question. The framework uses namespaced keys for SharedMemory, so each agent writes to its own namespace -- no cross-agent write conflicts. Reads are global. Would love to hear your thoughts on this approach.
Good (human):
SharedMemory is namespaced per agent, so writes don't conflict. Reads are global though. Closest to single-writer-per-namespace if you want a label for it.
Bad (AI smell):
Appreciate the honest feedback. Local model compatibility is still rough -- tool-calling format varies a lot across models. If you have specific errors, happy to look into it.
Good (human):
yeah local model support is still rough tbh. tool-calling format varies a lot between models and that's where it breaks. if you hit specific errors feel free to open an issue, would be useful to know what breaks first.
When the platform isn't listed above (HN, Discord, forums, etc.), apply Part 1 universal principles plus:
Draft complete -> Run the 5-step pre-send checklist -> Ask the user whether to send -> Execute after confirmation.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.