hyper-auto — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hyper-auto (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Single-gesture pipeline: hyper-plan-loop converges → hyper-implement-loop runs on the produced plan. Stops cleanly at any terminal state in between. No cron, no merge, no push, no autonomous follow-up rounds — just the two loops, chained.
/hyperclaude:hyper-implement-loop directly./hyperclaude:hyper-plan-loop, then decide.Invoke /hyperclaude:hyper-plan-loop <task> with the user's task description verbatim, minus any seat override. Let it run to terminal state.
Each inner loop seats its own reviewer per ${CLAUDE_PLUGIN_ROOT}/references/reviewer-seat.md; a "review with Claude" / "use Codex" given to hyper-auto decides both loops' seats.
Implementing on a plan with unresolved blocking findings wastes the implement-loop budget on a known-broken input — this is the safety boundary.
Invoke /hyperclaude:hyper-implement-loop <plan-path-from-Step-1> with the canonical plan path captured from plan-loop's report. Let it run to terminal state.
On a clean composed exit (guard below), FIRST run the terminal recap, THEN emit the composed report so the report can quote the actual written recap path. On any non-clean terminal the recap is skipped entirely.
Clean-exit guard. Auto-recap fires ONLY when ALL of these hold:
fix(review): convergence commit reported SUCCESS (commit SHA + clean tree) OR SKIP (nothing staged, clean tree).Non-clean terminals NEVER auto-run recap, and NEVER relay the implement-loop's standalone recap-recommendation bullet:
fix(review): convergence commit FAILED (dirty tree / not-ready-to-push) surfaces the loop's Step 7 report with the recap-recommendation bullet STILL suppressed; hyper-auto REPLACES it with an explicit auto-recap skipped — convergence commit failed, tree not clean; run /hyperclaude:hyper-recap <plan-path> manually after resolving line — never the standalone recommendation.Terminal recap (clean exit only). Invoke /hyperclaude:hyper-recap <canonical-plan-path> with the SAME plan path captured in Step 2 and passed to Step 3 (the active .hyperclaude/plans/<basename> path). hyper-implement archived that path to plans/done/ on completion, and hyper-recap's path branch relocates the now-missing active path to its done/ sibling — binding the recap to THIS exact cycle. Claude-only: no Codex, no agent dispatch, live context. NEVER invoke it no-arg (no-arg picks newest-by-mtime and can target the wrong cycle). This runs before the composed report.
Composed report. Relay both phases' final-report terminal facts so the user can audit the full chain. Do not paraphrase or invent fields — but apply TWO composed-flow exceptions:
hyper-auto, Step 3 has already executed the implement phase, so relaying it verbatim would tell the user to re-implement an already-implemented plan. Drop that bullet from the relayed plan-loop report.hyper-auto the recap is auto-run here (the terminal action above), so the report surfaces the ACTUAL recap path instead of a recommendation (mirrors the plan-loop Next-step suppression).Plan-loop bullets to relay (Step 8 of hyper-plan-loop, minus the suppressed Next-step):
Reviewer seat: line and review iterations consumed.Implement-loop bullets to relay (Step 7 of hyper-implement-loop, verbatim):
reviewArtifacts[] paths.Reviewer seat: line and review iterations consumed./simplify recommendation when the implement-loop made one.resume-failed / fallback rounds noted.This "ALWAYS" scopes to the two Step-7-reaching exits only — Step 2 and Step 6 STOPs never reach the composed report; they surface the underlying loop report verbatim (Step 2, guard case (b)) and carry no recap-outcome line. For those two exits, the composed report ALWAYS ends with a hyper-auto recap-outcome line — never claiming an unwritten path:
auto-recap skipped (<reason>) line from guard case (c).hyper-implement-loop directly; running plan-loop on a plan-shaped task description duplicates work.auto-recap skipped (<reason>) line; or invoking hyper-recap no-arg instead of with the captured canonical plan path.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.