claude-md-to-agents-md — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-md-to-agents-md (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Global, project-agnostic skill. It finds every CLAUDE.md in the current repo, identifies directories that have no matching AGENTS.md, translates each source file using the Claude -> Codex substitution table, and - with per-item approval - writes the draft or invokes $init inline for a richer code-derived alternative.
Use when: you've opened a Claude-first repo in Codex and there are zero or few AGENTS.md files; the existing CLAUDE.md files already describe the directory's purpose and conventions, so translation is a near-free win over starting from scratch.
find . -name CLAUDE.md \
-not -path '*/node_modules/*' \
-not -path '*/.git/*' \
-not -path '*/vendor/*' \
-not -path '*/.venv/*'Also detect AGENTS.override.md files with a parallel find. Keep them as target-side context - they are never translated or overwritten, but they may affect the approval prompt for a directory that is missing shared AGENTS.md guidance.
For each <dir>/CLAUDE.md found, check whether <dir>/AGENTS.md already exists. Separate results into three buckets:
CLAUDE.md but no AGENTS.md (action candidates)CLAUDE.md and AGENTS.override.md, butno AGENTS.md (action candidates with an extra warning)
If there are no gaps or override-present gaps, report "All directories with CLAUDE.md already have an AGENTS.md - nothing to do." and stop.
Present the gap list before doing anything else:
Directories with CLAUDE.md but no AGENTS.md
- src/backend/ (CLAUDE.md: 34 lines)
- scripts/ (CLAUDE.md: 12 lines)
Already in sync (skipped)
- . (both files exist)
Needs extra confirmation - Codex override already present
- .github/ (AGENTS.override.md exists - AGENTS.md would add shared guidance)Ask the user which items to act on. Do not proceed without explicit per-item approval.
Before presenting the translated draft for a given directory, apply the $where-agents-md scoring heuristic as a quick sanity check.
Positive signals (the directory likely warrants its own AGENTS.md):
package.json, pyproject.toml, go.mod, Cargo.toml,setup.py, *.csproj, pom.xml, etc.
services/<x>, packages/<x>, apps/<x>, cmd/<x>.Negative signals (the directory may not need one):
AGENTS.md.If the directory scores negatively, warn before showing the draft:
"Warning: this directory may not warrant its own AGENTS.md - it has no module boundary and a parent instruction file may already cover it. Proceed anyway?"
If it scores positively, note the signal in the approval prompt (e.g., "This directory has its own package.json - an AGENTS.md here is well-motivated.").
Read the CLAUDE.md and apply the substitution table in order:
| Find | Replace with |
|---|---|
CLAUDE.md | AGENTS.md |
/<skill-name> invocation syntax | $<skill-name> |
where-claude cross-references | where-agents-md |
audit-claude-md cross-references | audit-agent-docs |
Claude config paths (~/.claude/, .claude/) | Codex config paths (~/.codex/, .codex/) |
| "Claude Code" when referring to the product | "Codex" |
Show the full translated draft to the user. For each item, offer two choices:
Option 1 - Write this translated draft as <dir>/AGENTS.md Fast path; content mirrors the CLAUDE.md. Best when the source is high-quality and detailed.
Option 2 - Invoke `$init` inline for this directory Codex invokes $init targeted at <dir> in this same session - no navigation needed. Produces a fresh, code-derived doc that may be richer than the translation. Best when the CLAUDE.md is sparse or generic and the directory has substantial source code worth deriving context from.
Require an explicit choice (1, 2, or skip) before moving to the next item.
On choice 1: write <dir>/AGENTS.md with the translated content. Create intermediate directories if needed.
On choice 2: invoke $init with <dir> as the target directory. $init will analyze that directory's code and write its own AGENTS.md; record the outcome in the wrap-up.
On skip: record the directory in the wrap-up; do not write anything.
Report a summary in three sections:
Created (translated draft)
<dir>/AGENTS.md
Created (via $init)
<dir>/AGENTS.md
Skipped
<dir> - already existed
<dir> - user declined
<dir> - negative $where-agents-md signal, user chose not to proceedNote: AGENTS.md files are picked up automatically in the next Codex session opened in that directory - no ./install.sh step or restart required.
AGENTS.md. Skip with a per-item warning if the targetalready exists.
CLAUDE.md.~/.claude/, ~/.codex/).AGENTS.override.md as a replacement target; report it as existing localCodex override guidance and require explicit user approval before adding shared AGENTS.md guidance beside it.
$where-agents-md sanity check and surface the result in the approval prompt;never silently create a file in a directory that clearly does not warrant one.
$init) over option 1.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.