yaml-json-toml-loader — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited yaml-json-toml-loader (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate multi-format config file loaders.
import fs from 'fs';
import path from 'path';
import yaml from 'yaml';
import toml from '@iarna/toml';
type ConfigFormat = 'json' | 'yaml' | 'toml' | 'auto';
export function loadConfigFile(filepath: string, format: ConfigFormat = 'auto'): unknown {
const content = fs.readFileSync(filepath, 'utf-8');
const ext = format === 'auto' ? path.extname(filepath).toLowerCase() : `.${format}`;
switch (ext) {
case '.json': return JSON.parse(content);
case '.yaml': case '.yml': return yaml.parse(content);
case '.toml': return toml.parse(content);
default: throw new Error(`Unknown config format: ${ext}`);
}
}
export function saveConfigFile(filepath: string, data: unknown, format: ConfigFormat = 'auto'): void {
const ext = format === 'auto' ? path.extname(filepath).toLowerCase() : `.${format}`;
let content: string;
switch (ext) {
case '.json': content = JSON.stringify(data, null, 2); break;
case '.yaml': case '.yml': content = yaml.stringify(data); break;
case '.toml': content = toml.stringify(data as any); break;
default: throw new Error(`Unknown format: ${ext}`);
}
fs.writeFileSync(filepath, content);
}~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.