climate-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited climate-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You have access to climate, a CLI that generates production-ready Go command-line clients from OpenAPI specifications and can emit Markdown prompts for agent skills.
climate compose instead of climate generate.cli_name, binary_path, and source_dir.climate skill generate <cli-name>.climate mock <openapi_spec>.climate completion install --shell <shell>.climate publish <cli-name>.climate generate [--name <cli-name>] [--out-dir <dir>] [--no-build] [--force] <openapi_spec><openapi_spec> can be a local path or an HTTP(S) URL.--no-build generates source only.--force overwrites an existing output directory.Success output is JSON:
{
"cli_name": "<name>",
"binary_path": "<absolute path to compiled binary>",
"source_dir": "<absolute path to generated source>",
"version": "<API version>",
"openapi_hash": "<sha256 of the spec>"
}Generated CLIs also include config plus spec-aware event commands:
<cli-name> events list
<cli-name> config list
<cli-name> config set <key> <value>
<cli-name> config get <key>
<cli-name> config unset <key>
<cli-name> config profiles list
<cli-name> config profiles create <name>
<cli-name> config profiles use <name>
<cli-name> config set --secret events.signing_secret <value>
<cli-name> auth login [--scheme <name>]
<cli-name> auth status
<cli-name> auth logout [--scheme <name>]
<cli-name> events listen [event-name] [--host 127.0.0.1] [--port 8081] [--path /] [--tunnel none|auto|cloudflared] [--signature-mode none|hmac]
<cli-name> events emit <event-name> --target-url <url> [--data-json <json>] [--data-file <path>] [--signature-mode none|hmac]climate listclimate compose [--name <cli-name>] [--out-dir <dir>] [--no-build] [--force] [--title <title>] [--api-version <version>] [--description <text>] <spec1>:<prefix1> [<spec2>:<prefix2> ...]Each positional argument is <spec>:<prefix> where <spec> can be a local path or URL and <prefix> starts with /.
climate mock [--port <port>] [--latency <ms>] [--emit-url <url> --event-path <path> [--event-method <method>]] <openapi_spec>climate completion bash|zsh|fish|powershell
climate completion install [--shell bash|zsh|fish|powershell]
climate completion uninstall [--shell bash|zsh|fish|powershell]climate remove [--purge-sources] [--yes] <cli-name>climate upgrade [--openapi <spec>] <cli-name>climate uninstall [--full] [--yes]climate skill generate [--mode=full|compact] [--out <file>] <cli-name>climate publish [--owner <owner>] [--repo <repo>] [--visibility public|private] [--github-token <token>] <cli-name>This command creates or reuses a GitHub repository through the GitHub API, writes lifecycle files including CI, CI auto-fix, and release workflows, initializes git, and pushes the generated source tree.
climate skill generatorGenerate a CLI:
climate generate --name petstore https://petstore3.swagger.io/api/v3/openapi.jsonCompose two service specs into one facade CLI:
climate compose orders.yaml:/api/orders users.yaml:/api/users --name gatewayRun a local mock server:
climate mock --port 9090 --latency 150 https://petstore3.swagger.io/api/v3/openapi.jsonGenerate a compact skill prompt for that CLI:
climate skill generate petstore --mode=compactPublish it to GitHub:
climate publish petstore --owner disk0Dancerclimate skill generate, climate skill generator, and climate completion <shell> print text to stdout.climate mock in server mode and climate mock --emit-url ... intentionally print plain-text runtime output.<cli-name> <tag> <operation> [flags] --output=json|table|raw.brew tap disk0Dancer/tap && brew install climate.--github-token, GITHUB_TOKEN, or GH_TOKEN.climate remove and climate uninstall prompt unless --yes is passed.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.