where-agents-md — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited where-agents-md (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Recommend high-value locations for scoped Codex instruction files. This skill reports only; it does not create or edit files.
Codex reads AGENTS.md instruction files as project guidance. Nested files should be used only when a subtree has meaningful local conventions that the parent file should not carry.
Use AGENTS.md for shared project guidance. Use AGENTS.override.md only when the user explicitly wants a local override pattern and the repo already uses that convention.
Recommend a directory only when it clearly clears the bar.
Positive signals:
package.json, pyproject.toml, go.mod, Cargo.toml,*.csproj, pom.xml, build.gradle, or similar manifest.
test runner, deployment target, or safety constraint from the parent.
apps/<x>, packages/<x>, services/<x>, cmd/<x>, or abounded domain module in a monorepo.
Negative signals:
a parent instruction file.
AGENTS.md; report that as a prerequisite, not a nestedrecommendation.
find . \( -name AGENTS.md -o -name AGENTS.override.md \) -not -path '*/node_modules/*'
AGENTS.md, CLAUDE.md if present, and README* to understand what isalready documented.
.gitignore.context.
available and score from its summary.
Return a short ranked list. For each recommendation include:
AGENTS.md;Add a "Skipped / not worth it" section for notable directories you intentionally left out and why.
AGENTS.md.
.gitignore and exclude generated/vendor/dependency directories.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.