wick-migrate — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited wick-migrate (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Consolidate everything into one portable, git-mergeable memory layer and disable the machine-keyed shadow. This skill is the executable form of PORTABILITY.md — read that for the full rationale and the failure modes; this is the operating checklist with the gates.
memory/ folder must travel whole)memory/fresh session before consolidating — else the source mutates under you and the layers diverge invisibly. This makes it a two-session** job, not one.
two ways this silently fails. Confirm by a fresh session and by resolving paths from the launch CWD.
memory/_archived-auto-memory/ (thereversibility net), never to nothing.
~/.claude/projects/<path-encoded-folder>/memory/. If present, write{ "autoMemoryEnabled": false } to the project's in-folder .claude/settings.json (verify the key against current docs; check settings.local.json doesn't re-enable). Then start a fresh session and confirm no auto-memory loaded. Do the rest there.
memory/ + frozen auto-memory). Note duplicates,convention-bleed (feedback_X.md), and what's already in CLAUDE.md. Present it.
conflict — surface both versions, recommend, let the user decide. Present the sort.
whether content is still true. Present findings.
memory/feedback/*.md topic files — only if it isn'talready in CLAUDE.md. Strip YAML frontmatter; keep tables/values; <200 lines each.
projects/<name>/ with a status line + pointer.
memory/ subfolder → memory/_archived-auto-memory/ withan INERT README. Not the *.jsonl transcripts.
memory/, CLAUDE.md, and tooling.archives excluded.
capture, write discipline, portability note (memory/ is the single source of truth).
CLAUDE.md; runnode tools/wick-path-audit.mjs. Watch the two "relative-but-resolves-wrong" traps (own-folder-name doubling; missing memory/ prefix).
.mcp.json uses ${CLAUDE_PROJECT_DIR}; noplaintext secrets (node tools/wick-scrub.mjs); hooks use relative cwd.
all four scanners green; nothing lost; no conflict silently resolved. Report.
CLAUDE.md.path resolution.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.