hyper-implement — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited hyper-implement (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Plan execution gate. Reads a plan, dispatches a fresh subagent per task, runs two reviews (spec compliance, then code quality) before marking each task complete. Uses our own agents (implementer, verifier) and our own gate skills.
/hyperclaude:hyper-implement [path]..hyperclaude/plans/) and you're about to execute it.Skip when:
Invocation argument: $ARGUMENTS
In priority order:
ls -1t .hyperclaude/plans/*.md 2>/dev/null | head -1.hyperclaude/plans/<slug>.md first." Stop.Read the resolved plan's opening lines. If the file begins with a YAML frontmatter block containing tier: epic, it is an epic roadmap, not an executable task plan (hyper-plan emits these for oversized tasks, under .hyperclaude/epics/). STOP before any branch or git work and tell the user, substituting the resolved roadmap path into the command: "This is an epic roadmap (tier: epic), not an executable task plan. Expand a milestone into a detailed plan first — /hyperclaude:hyper-plan <this roadmap's path> milestone <K> (K is one of the ## Milestone N: entries in this roadmap; passing the path targets THIS epic — omitting it auto-picks the newest roadmap instead, which may be a different file) — then run hyper-implement on that detailed plan." Plans without tier: epic frontmatter (all detailed plans, including the auto-expanded Milestone-1 plan) proceed normally — a detailed plan may carry a hook-stamped plugin-version frontmatter block, but that is not tier: epic, so it is not a roadmap and proceeds. Roadmaps live in .hyperclaude/epics/, not .hyperclaude/plans/, so the newest-plan auto-pick in Step 1 never selects one — this guard only fires when a roadmap path is passed explicitly.
Read the plan with the Read tool. Extract every ## Task N: <title> section with its full text — files-to-create/modify, step-by-step checkboxes, verification commands, commit message.
Track progress in the plan file itself — step 3.5 marks each task's checkboxes - [x] as it completes. That file is the only progress record the loop keeps, so it survives context loss.
Clean-tree preflight (do this FIRST). Per-task commits use git add -A (step 3.6), so the working tree MUST be clean before the loop starts — otherwise pre-existing unrelated edits or untracked files (including local secrets) get swept into the first task's commit. Check:
git status --porcelainIf the output is non-empty (any tracked modification or non-ignored untracked file — .hyperclaude/ is gitignored and never appears, so it's exempt), STOP and tell the user: "Working tree is not clean. hyper-implement commits per task with git add -A; commit, stash, or clean the unrelated changes first, then re-run." Do not branch, do not start the loop. This preflight is what makes per-task git add -A provably scoped: each task starts from a clean tree, so everything added during the task (implementer output + spec/quality fix-loop edits) is exactly that task's work, and the task commit returns the tree to clean for the next task.
Per-task commits never land on the default branch — hyper-implement always commits on a feature branch.
Derive the slug from the plan filename: strip the <YYYYMMDD-HHMM>- timestamp prefix and the .md suffix (e.g. 20260517-1946-hyper-implement-code-review-reviser.md → hyper-implement-code-review-reviser). If the filename has no timestamp prefix, use the basename without .md.
Find the current branch and act on it:
git rev-parse --abbrev-ref HEADmain or master (the default branch — protected) → create or switch to hyper/<slug>: git switch -c "hyper/<slug>" 2>/dev/null || git switch "hyper/<slug>"(-c creates it from the current HEAD; the || fallback switches to it if it already exists — a resumed run reuses the same branch.)
Tell the user which branch per-task commits will land on. Never push the branch — push stays a user action (see Step 4 / Rules).
For EACH task in order:
subagent_type: hyperclaude:implementer, `run_in_background: false` (spec review in Step 3.2 gates on this result). Prompt MUST include:<base>..<head>).If issues found → re-dispatch the implementer with the fix list, `run_in_background: false` (synchronous so re-review sees the fixed tree) → re-review. Loop until ✅.
Loop until reviewer approves (Minor-only is acceptable; Critical/Important must be fixed).
tests/**, *.test.*, *.spec.*) or build/CI configuration (package.json scripts, smoke script, CI workflow), dispatch subagent_type: hyperclaude:verifier, `run_in_background: false` (its PASS/FAIL gates the commit). Verifier runs the project's tests, build, and lint and reports PASS / PARTIAL / FAIL with verbatim output. Verifier never modifies files. Skip the verifier when the task didn't touch tests or build inputs — the spec/quality reviews above already cover code correctness.- [ ] inside the current ## Task N: <title> block to - [x]. Scope is the task block only — leave other tasks' boxes alone. This keeps the plan file's checkbox state the durable source of "what's done" — survives context loss and lets a resumed session see exactly which tasks remain. Do this BEFORE the commit so the durable artifact lands first.Stage, then check whether anything was staged, then commit only if so:
git add -A
git diff --cached --quiet && echo "SKIP: nothing staged" || git commit -m "<task commit message>".hyperclaude/ is gitignored, so plan-file checkbox edits and run artifacts never sweep in. (This is the documented exception to CLAUDE.md's "don't blanket git add -A", which is scoped to the release commit on main.)git diff --cached --quiet exits 0 → no diff, e.g. a pure-verification task) → skip the commit, note "Task N: no file changes — no commit" in the run summary, continue.git rev-parse HEAD) for the final summary.After all tasks:
/hyperclaude:hyper-code-review is available, run it for a Codex-side review of the entire diff. Useful catch for cross-task issues.git tag -a vX.Y.Z), do NOT push it; leave that to the user.- [x], so a fully-executed plan can still show unchecked boxes). This applies to nested runs too: when hyper-implement-loop invokes this skill the plan is still archived here at implementation completion — the loop's later review/fix rounds operate on already-implemented code and never re-read the plan. Archive only a canonical plan — resolved path is a direct child of .hyperclaude/plans/; an explicit $ARGUMENTS path elsewhere is left untouched (moving it would be destructive and would violate the "only plans/ is archived" contract). Use a plain mv (.hyperclaude/ is gitignored, so git mv fails): plan="<resolved plan path>"
plans_dir=$(cd .hyperclaude/plans 2>/dev/null && pwd)
plan_parent=$(cd "$(dirname "$plan")" 2>/dev/null && pwd)
if [ -n "$plans_dir" ] && [ "$plan_parent" = "$plans_dir" ]; then
mkdir -p .hyperclaude/plans/done && mv "$plan" .hyperclaude/plans/done/
else
echo "Plan is not a direct child of .hyperclaude/plans/ — left in place, not archived."
fiThe guard compares resolved parent dirs, so a path under plans/done/ or plans/<subdir>/ (or any external dir) is left alone — only a true .hyperclaude/plans/<file>.md plan moves. Both the Step 1 newest-plan auto-pick (*.md is non-recursive) and the SessionStart snapshot ignore the done/ subdir for free, so an executed plan stops being surfaced as the "Active plan". Skip the archive on any early STOP before completion (BLOCKED, ambiguity, red acceptance) — leave the plan in .hyperclaude/plans/ so a resumed run can pick it up. Only plans/ is archived; research/ and *-reviews/ stay put (the snapshot shows newest-only, and --resume depends on prior review artifacts remaining in place).
hyper/<slug> when on main/master; per-task commits never land on the protected default branch.verifier agent for code review. Wrong role — verifier runs tests, doesn't critique code.Apply the SAME tier to the spec / quality reviewer dispatches in Step 3.2 and 3.3. They're general-purpose subagents that otherwise inherit the lead's model, which over-pays on mechanical / standard tasks. Pass model: on the Agent call to match the implementer tier you just chose. Verifier (Step 3.4) stays on its frontmatter default — no override.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.