crank

Warn

Audited by Runlayer on Mar 3, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
87%
Files
16
Flagged
11
Chunks
23
Flagged Files (11)
crank/references/worktree-per-worker.mdMEDIUM
87.3%

Malicious tool definition detected

Merge and cleanup ```bash git merge --no-ff "swarm/${epic_id}" -m "chore: merge swarm/${epic_id}" git worktree remove "/tmp/swarm-${epic_id}" git branch -d "swarm/${epic_id}" ``` ## CC Estimation Heuristic Each extract-method refactoring saves approximately 3-5 CC points. For CC 30+, plan 6-10 extractions to reach CC <15.

crank/references/test-first-mode.mdMEDIUM
87.0%

Malicious tool definition detected

Generate tests following the project's existing test patterns.

crank/references/failure-recovery.mdMEDIUM
83.4%

Malicious tool definition detected

## Final Batched Validation When all issues complete, check whether a full /vibe is needed: ```bash # Check wave checkpoint verdicts — skip final vibe if ALL waves passed clean ALL_PASS=true for checkpoint in .agents/crank/wave-*-checkpoint.json; do verdict=$(jq -r '.acceptance_verdict // "UNKNOWN"' "$checkpoint" 2>/dev/null) if [[ "$verdict" != "PASS" ]]; then ALL_PASS=false break fi done ``` **If ALL waves passed acceptance check with PASS verdict (no WARNs, no retries):** Skip the final /vibe

crank/references/failure-taxonomy.mdMEDIUM
81.5%

Tool passed security scan

Malicious tool definition detected

Mail human (--human, not mayor/ since we ARE mayor) gt mail send --human -s "BLOCKER: <issue> - <failure-type>" -m "See issue for details" # 4.

crank/SKILL.mdMEDIUM
81.5%

Malicious tool definition detected

crank/references/wave-patterns.mdMEDIUM
80.3%

Tool passed security scan

Malicious tool definition detected

| ```bash # Record verdict in epic notes bd update <epic-id> --append-notes "CRANK_ACCEPT: wave=$wave verdict=<PASS|WARN|FAIL> at $(date -Iseconds)" ```

crank/references/troubleshooting.mdMEDIUM
78.0%

Malicious tool definition detected

crank/references/ralph-loop-contract.mdLOW
71.6%

Malicious tool definition detected

- Keep state in files/issue trackers, not long conversational memory. - Prefer deterministic checks over subjective completion.

crank/references/commit-strategies.mdLOW
62.2%

Tool passed security scan

crank/references/claude-code-latest-features.mdLOW
62.1%

Tool passed security scan

crank/references/fire.mdLOW
51.9%

Tool passed security scan

Passed Files (5)Click to expand
crank/references/team-coordination.mdOK
43.3%

Tool passed security scan

crank/scripts/validate.shOK
38.9%

Tool passed security scan

crank/references/wave1-spec-consistency-checklist.mdOK
35.2%

Tool passed security scan

crank/references/taskcreate-examples.mdOK
20.5%

Tool passed security scan

crank/references/contract-template.mdOK
10.5%

Tool passed security scan

Audit Metadata
Max File Score
87%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
16
Files Flagged
11
Chunks Analyzed
23
Analyzed
Mar 3, 2026, 07:22 PM
Security Audit — runlayer — crank