codify — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited codify (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
/codify <skill-name> — Extract deterministic logic from a skill's SKILL.md into a Python script.Takes a skill's SKILL.md and splits it into:
<skill-dir>/script.py) — all deterministic operations (file ops, validation, parsing, template copying)/codify <skill-name> — the skill directory name under ~/.claude/skills/. If omitted, list available skills and ask.
~/.claude/skills/<skill-name>/SKILL.mdDETERMINISTIC (goes into script.py):
JUDGMENT (stays in SKILL.md):
SKILL: <name> (<line-count> lines)
DETERMINISTIC operations found:
- <description of each operation that will become a script subcommand>
JUDGMENT operations (staying in SKILL.md):
- <description of each AI reasoning block>
Proposed script subcommands:
- <subcommand-name>: <what it does>
- <subcommand-name>: <what it does>Ask user to approve or adjust before proceeding.
Create ~/.claude/skills/<skill-name>/script.py following these rules:
Script Architecture:
_out(data) helper--help for every subcommandchmod +x)#!/usr/bin/env python3Subcommand Design:
--flag (not positional){"status": "ok", ...} on success{"status": "error", "message": "..."} and exit(1) on failureCode Quality:
Rewrite the SKILL.md keeping:
Replace with script calls:
Preserve and update frontmatter:
name, description, user-invocable unchangeddescription if the workflow changed significantlyAdd a Script Reference table at the bottom:
## Script Reference
All commands output JSON. Run from skill directory.
| Command | Purpose |
|---------|---------|
| `subcommand-1 --flag` | What it does |
| `subcommand-2 --flag` | What it does |Target: Reduce SKILL.md by 50-70% while preserving all behavior.
Run each script subcommand with --help to verify it parses. Run preflight or equivalent read-only command against the current project to verify JSON output. Report results.
Before overwriting SKILL.md, save original as SKILL.md.pre-codify.
/codify startResult: The transformation we just did — 637-line SKILL.md with 7 Agent Ref sections became 204-line SKILL.md + 320-line session-init.py script with 9 subcommands.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.