setup-session-briefing — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup-session-briefing (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Get from zero to a working session briefing for this project — and, if you want it, a multi-project constellation. This is a prompt-driven skill: explore, present what you find, confirm with the user, then run the scaffolding. Don't dump every question at once; walk through them one at a time.
Assume the user is new to the method. Each decision below opens with a short explainer.
The mechanics are in the siblingagent-session-briefingskill'sscripts/briefing.py(Claude Code:~/.claude/skills/agent-session-briefing/scripts/briefing.py). Call itBPbelow.
Read the current state — don't assume:
$SESSION_BRIEFING_HUB set? Does ~/.session-briefings/ exist? Is it a git repo?git remote -v and git status. Is there acontext file (AGENTS.md, CLAUDE.md, GEMINI.md) at the root? Does it already contain an <!-- agent-session-briefing --> pointer block?
<hub>/<project>/SESSION_BRIEFING.md already exist? (If so, this isan update, not a setup — point the user at the agent-session-briefing skill instead.)
services)? Note them; you'll offer a parent in Section B.
Summarise what's present and what's missing. Then go section by section — present, get the answer, move on. Don't pick for the user where a real choice exists.
Section A — Hub location.
Explainer: The "hub" is one git repo that holds all your session briefings, one folder per project, separate from your code. Keeping it separate (not inside each repo) is what lets one parent briefing roll up many projects. Default: ~/.session-briefings/.~/.session-briefings/ — fine for almost everyone.the $SESSION_BRIEFING_HUB env var or --hub; mention they'll want it consistent across sessions.
git init the hub (and add a remote) so they get version history + hook validation.Offer to do it.
Section B — Single project or a constellation?
Explainer: If you're tracking one project, you just need one briefing. If you have several related projects (a platform and its services, a monorepo of packages), you can give them a shared parent briefing that auto-aggregates their status into one view. You don't have to decide forever — you can add a parent later.
to create it too. This project will declare --parent <name>; optionally a --layer tag (a free-form dimension like visibility/ownership/maturity — leave unset if unsure).
Section C — Context file.
Explainer: The briefing pairs with your project's "agent context file" — the timeless doc your harness auto-loads (AGENTS.mdis the cross-tool standard; Claude Code usesCLAUDE.md; Gemini CLI usesGEMINI.md). Timeless reference (build/run/conventions) lives there; timestamped state (status/decisions/next steps) lives in the briefing. The setup wires a one-line pointer from the context file to the briefing so a cold session knows where to look.
AGENTS.md (the standard) with the pointer. Offer that,or let them pick a name with --context-file.
Section D — Stop-hook validator (optional, Claude Code).
Explainer: An optional Stop-hook runs briefing.py check at the end of each turn and warns if a changed briefing is malformed (e.g. a section got dropped). Warn-mode by default; can be a hard gate.agent-skills/agent-session-briefing/scripts/stop-validate.sh in settings.jsonunder hooks.Stop. Skip if they'd rather not touch settings. (This one's Claude-Code-specific.)
Show the user exactly what you'll run, then do it:
git init it if new and they agreed.--project-dir):python3 BP new <project> [--hub <hub>] [--context-file <name>]--parent <parent> [--layer <tag>] (and new the parent first if needed).AGENTS.md was created with it).python3 BP rollup <parent> and show the matrix.python3 BP check <hub>/<project>/SESSION_BRIEFING.md — fix anything it flags.Then help them fill the v1.0 briefing with real content (§1 context, §2 status, decisions already locked) — several sections will be thin at v1.0, which is fine.
Tell them what now exists and the ongoing loop:
<hub>/<project>/SESSION_BRIEFING.md; the pointer is in their context file.session, bump → replace §3 → update §2/§4/§5/§6 → pointer → rollup (if a parent) → check.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.