optimus-prime — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited optimus-prime (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Ultrathink.
Generate a Claude configuration that fits the specific project. Every skill, rule, and CLAUDE.md entry must exist because this project needs it — not because a template included it. Analyze the real codebase deeply, understand its conventions and patterns, and build a config that makes Claude work well here.
Default to re-prime whenever meaningful existing config is found. Never overwrite it wholesale without user approval.
/skill-creator — every skill must go through skill-creator to ensure quality and project fit. Starters in .claude/starter-skills/ are reference input to accelerate creation, not templates to copy..claude/starter-skills/ after processing. Keep protected skills. Confirm all deletions.Follow full step-by-step in setup-project.md.
Every piece of knowledge must earn its place. Use this to decide where it belongs:
| Detected need | Where it belongs | Test |
|---|---|---|
| General framework/library knowledge | Skill (via /skill-creator) | Would a reusable skill teach this across projects? |
| Project-specific constraint that still produces wrong code with the right skill loaded | .claude/rules/<name>.md with paths: | With the relevant skill activated, will code still be wrong without this? |
| Identity, commands, stack, key architecture, reference pointers | CLAUDE.md | Should this be always-on for most tasks in this repo? |
| Detailed architecture or domain explanations | Existing docs/, READMEs — referenced from CLAUDE.md | Valuable but too detailed for always-on? |
| Dense agent-oriented reference material - referenced from CLAUDE.md | .claude/project/ (optional) | Do agents need a tighter reference than the human docs provide? |
_apply-all.md — it is a universal boilerplate rule from prime, not project config.Before making non-trivial changes, report findings in this shape:
What Claude config already exists; what the repo evidence says about stack, tooling, and conventions.
What to create, update, keep, or remove — including which skills to build and what each should cover.
Concrete file list with short purpose notes.
Include these only when non-empty:
After approval, implement and finish with a short summary of what changed and any follow-ups.
| Reference | Content |
|---|---|
| analysis-checklist.md | What to inspect during repo + existing-config review |
| setup-project.md | Fresh-prime / re-prime step-by-step workflow |
<user-context>$ARGUMENTS</user-context>
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.