reference-library-manager — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited reference-library-manager (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Manage the project reference/source library as durable research infrastructure. This skill answers: What sources do we have, and what is their processing state?
Do not use this skill for deep source understanding or project implications. Use reference-reading-summarizer for "what does this source say?" and reference-project-synthesizer for "what does this source mean for our project?"
<installed-skill-dir>/
├── SKILL.md
├── scripts/
│ └── scan_reference_library.py
├── references/
│ └── library-policy.md
└── templates/
├── reference-index.md
└── reading-status.md<project-root>/reference/.reference/
├── sources/ # non-paper sources and bundles, often ignored/private
│ ├── collaborator-docs/
│ ├── markdown/
│ ├── bundles/
│ └── misc/
├── papers/ # backward-compatible paper/PDF location
├── cards/ # stable source cards from reference-reading-summarizer
├── project-use/ # project implications from reference-project-synthesizer
├── summaries/ # optional summaries
├── notes/ # human notes
└── .agent/
├── source-index.md
├── reference-index.md # compatibility alias
├── processing-status.md
├── reading-status.md # compatibility alias
├── metadata-gaps.md
├── duplicate-check.md
└── runs/ # raw scan/read trajectories, usually ignoredreference/. Prefer reference/sources/ plus backward-compatible reference/papers/; if neither exists, scan supported source files recursively under reference/.references/library-policy.md.python3 <installed-skill-dir>/scripts/scan_reference_library.py --project-root .reference/.agent/source-index.mdreference/.agent/reference-index.mdreference/.agent/processing-status.mdreference/.agent/reading-status.mdreference/.agent/metadata-gaps.mdreference/.agent/duplicate-check.mdidea-seedwriting-exemplarmethod-sourcetheory-sourcebenchmark-sourceimplementation-sourcecollaborator-feedbackproject-specbaselinecitation-supportclosest-workreviewer-riskreference-reading-summarizerreference-project-synthesizercitation-coverage-auditliterature-review-sprintreference/.agent/runs/ only when useful.reference/.agent/.reference/cards/.reference/.agent/processing-status.md when sources are added, deduplicated, or change status. Project-level memory writeback (claim/evidence/risk boards) is handled by reference-project-synthesizer after synthesis, not by this skill.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.