setup-os-scripts — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup-os-scripts (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Goal: give the user a one-command launcher for their OS, plus the right MCP/skill wiring for their AI tool.
Determine the OS (Windows / macOS / Linux). You can ask the CLI for the exact instructions and target filenames:
knowledge-forge bootstrap --emit-instructionsFastest path (deterministic, no guessing):
knowledge-forge bootstrap --writeThis writes, in the project root:
kf.ps1 and kf.batkf.sh (made executable)Each launcher just cds into the project and forwards args to knowledge-forge, so the user can run ./kf.sh update / .\kf.ps1 update / kf.bat update.
If the user prefers hand-tuned scripts, write platform-idiomatic versions instead — but keep the same behavior (cd to project, forward args to knowledge-forge).
integrations/cursor/hooks.json + integrations/cursor/hooks/*into the project's .cursor/, and merge integrations/cursor/mcp.json into .cursor/mcp.json. Copy skills/* into .cursor/skills/ (or .agents/skills/).
integrations/claude-code/.mcp.json to the project root andskills/* into .claude/skills/.
knowledge-forge --helpThen tell the user the exact one-line command to refresh their knowledge base on their OS (e.g. .\kf.ps1 update on Windows, ./kf.sh update on macOS/Linux).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.