audit-agent-docs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited audit-agent-docs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Audit Codex project instruction files for staleness and coverage gaps. Treat AGENTS.md and AGENTS.override.md as the Codex instruction surface.
Each AGENTS.md or AGENTS.override.md owns its directory and all subdirectories that do not have their own agent instruction file. Use this scoped ownership to attribute git churn: a commit that only touches frontend/ should not make the root file stale if frontend/AGENTS.md exists.
For each instruction file, use its last-commit timestamp:
git log -1 --format=%aI -- <path>Count commits in scope since then, excluding noise:
| Commits in scope since last touch | Signal |
|---|---|
| 0-4 | Likely fresh |
| 5-14 | Possibly stale |
| 15+ | Likely stale |
Also treat the file as likely stale if manifest files, CI config, or top-level config changed since it was last touched.
Exclude lock files, generated output, dependency directories, virtualenvs, caches, coverage, vendored code, binary assets, and anything ignored by git. Count source, manifest, config, test, and documentation changes.
find . \( -name AGENTS.md -o -name AGENTS.override.md \) -not -path '*/node_modules/*' -not -path '*/.git/*'
AGENTS.md, then stop.available and work from its summary.
subtree with its own AGENTS.md or AGENTS.override.md.
For each file:
git log.For possibly stale and likely stale files, read the content and flag:
Keep notes short and evidence-based.
Apply the where-agents-md heuristic to find directories that clearly deserve scoped Codex guidance but lack it. Report only strong candidates.
Present findings in this order:
AGENTS.md.For each finding include path, last-touch date, churn count, and a one-line rationale.
Offer targeted edits per file. Get explicit per-file approval before modifying or deleting any instruction file. Never batch-rewrite agent docs silently.
AGENTS.md or AGENTS.override.md without explicit per-fileapproval.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.