Is doncheli-distill-64998d safe to install?

SaferSkills independently audited doncheli-distill-64998d (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.agent/skills/doncheli-distill/SKILL.md · 1 file

.agent/skills/doncheli-distill/SKILL.md1.8 KB · Markdown

name: doncheli-distill

description: Extract behavioral specifications and architecture diagrams from existing code (Blueprint Distillation / reverse engineering). Activate when user mentions "distill", "reverse engineer", "extract spec", "blueprint distillation", "understand codebase", "document existing code".

Don Cheli: Blueprint Distillation

Instructions

Identify the target module, service or codebase to distill
Scan entry points (routes, controllers, event handlers, CLI commands)
Trace data flows: inputs → transformations → outputs → side effects
Identify implicit business rules embedded in conditionals, validations, error handling
Map entity relationships from data models and DB schemas
Generate Gherkin scenarios that describe the observed behavior (not the code)
Produce a C4-style architecture diagram in text (Mermaid or ASCII)
Flag ambiguities, dead code, and undocumented assumptions with [NEEDS CLARIFICATION]

Output Format

## Blueprint: <module/service name>

### Architecture Diagram

…


### Distilled Spec (Gherkin)

Feature: <name> Background: …

Scenario: <happy path> Given … When … Then …

Scenario: <edge case / sad path> …


### Implicit Business Rules
1. <rule> — found in: <file:line>
…

### Ambiguities & Dead Code
- [NEEDS CLARIFICATION] <description> — <file:line>
…

Quality Gate

Every entry point must map to at least one Gherkin scenario
Architecture diagram must show at least: external inputs, internal modules, data stores, external services
Business rules must cite their source location

Do not use this skill when

The user wants to write new specs for a new feature (use doncheli-spec instead)
The codebase has no existing logic to analyze

doncheli-distill-64998d— agent skill

Is doncheli-distill-64998d safe to install?

Don Cheli: Blueprint Distillation

Instructions

Output Format

Quality Gate

Do not use this skill when

Audit the pieces. Scan the whole. Decide.