Spine — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Spine (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
spine turns an unfamiliar repository into a verified onboarding guide.
spine terminal demo
In one run it gives you:
mermaid.live linkIf you open a repo and think "where do I even start?", spine is for that moment.
Most onboarding docs are stale, too broad, or guessed. spine takes a narrower approach:
That makes it useful both for humans and for Claude Code.
/mapUse /map when you want the fastest deterministic preview.
ONBOARDING.mdmermaid.live link/onboardUse /onboard when you want the full guide.
ONBOARDING.mdnpm install -g @spine-io/onboardThen run:
onboard .Or for the map only:
onboard . --map-onlynpm install
npm run onboard -- .For the deterministic map-only path:
npm run map -- .The v1 Claude Code distribution lives in .claude-plugin/skills/:
.claude-plugin/skills/onboard/ for /onboard.claude-plugin/skills/map/ for /mapThe intended flow is:
/map for a fast, token-free architecture preview./onboard when you want the full reading tour.spine refresh .claude/REPO_CONTEXT.md so later Claude sessions inherit repo context.Why this is useful for Claude Code users:
spine can write .claude/REPO_CONTEXT.md when you opt in with --write-context-fileIf you are not using Claude Code skills yet, the CLI gives the same core output:
onboard .
onboard . --map-onlyStart with axios.
Why axios is the best launch benchmark:
Use the built-in benchmark catalog:
npm run benchmark:list
npm run benchmark:clone -- axios
npm run onboard -- benchmarks/repos/axiosOther strong follow-up demos:
glow for a clean Go CLI storypoetry for a larger Python codebaselog for a compact Rust libraryTypical ONBOARDING.md sections:
TL;DRArchitecture mapMental modelReading orderEntry points foundSubsystemsGotchasEstimated read timeTypical CLI output:
Detected library in javascript.
Found 1 entry point(s).
Synthesis source: deterministic.
Wrote ONBOARDING.md
Estimated cost: ~$0.008 input + ~$0.010 output = ~$0.018
This tour covers 7 spine file(s) and 4 subsystems.
Estimated savings: ~3.5 hours of manual exploration for ~$0.02 of LLM cost.npm run onboard -- . # full guide
npm run map -- . # map only
npm run onboard -- . --prompt-out prompt.txt
npm run onboard -- . --synthesis-input .onboard-response.json
npm run onboard -- . --synthesis-command "your-command-here"
npm run onboard -- . --cost-model sonnet-4.6
npm run onboard -- . --diff-against ONBOARDING.md
npm run onboard -- . --dry-run
npm run onboard -- . --write-context-fileThe built CLI also supports:
onboard . --out custom-onboarding.md
onboard . --map-only --out architecture.mmd
onboard --help
onboard . --dry-run
onboard . --write-context-fileCurrent verified spine coverage includes:
npm run check
npm run test
npm run buildnpm run onboard and npm run map execute the built CLI so the release path and local path stay aligned.
Contributions and real-repo testing are very welcome.
spine finds the wrong entry points or produces misleading outputspine on a real codebase and want to share what matched reality and what did notStart here:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.