The Agent Skills Directory

[SAFE]: The skill operates exclusively on local files within a git repository. It implements a strict 'back up before you plant' policy, copying files to a local .prove-it/audits/ directory before modification. Verification of restoration is performed using the cmp command to ensure data integrity.
[SAFE]: The use of sub-agents (via the Agent tool or Codex) is intended for 'blind' verification to test the accuracy of a separate verification skill. The instructions explicitly forbid the sub-agent from accessing git diff, git status, or audit logs to prevent it from 'cheating' by seeing the planted bug directly.
[SAFE]: No hardcoded credentials, network exfiltration, or obfuscation techniques were found in the instructions or the mutation catalogue.
[SAFE]: While the skill involves modifying code, it is framed entirely as a local development tool for mutation testing, with clear instructions to never commit, push, or stash the deliberate bugs.

audit-prove-it