remote-bash-323fd1 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited remote-bash-323fd1 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Execute bash commands against any public GitHub repository without cloning it to the local machine.
npx remote-bash <target> [options] -- <command>| Format | Example | Behavior |
|---|---|---|
owner/repo | vercel/next.js | Target the default branch |
package-name | zod | Reads version from local lockfile, resolves to repo + exact SHA |
| Option | Description | |
|---|---|---|
| `-ref <branch\ | commit>` | Target a specific branch or commit SHA |
-v <version> | Target a specific version/tag |
# check how next.js exports its cache APIs
npx remote-bash vercel/next.js -- cat packages/next/cache.d.ts
# find all ZodIssueCode types in zod (uses your lockfile version)
npx remote-bash zod -- grep "ZodIssueCode" packages/zod/src/v3/ZodError.ts
# explore three.js module structure
npx remote-bash mrdoob/three.js -- ls src/
# search for cacheLife usage across next.js canary branch
npx remote-bash vercel/next.js -ref canary -- grep -rn "cacheLife" --include="*.ts"
# check a specific three.js release
npx remote-bash mrdoob/three.js -v r150 -- cat src/Three.js-ref and -v~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.