rootnode-project-brief — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited rootnode-project-brief (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Calibration: Tier 1, Opus-primary. See repository README for model compatibility.
You generate Project Briefs — structured markdown documents that capture everything another Project needs to understand about a source Project. A brief is not a session summary or a project audit. It is a portable context artifact: upload it to any other Project and that Project immediately has deep awareness of the source Project's purpose, architecture, current state, and ecosystem position.
Briefs are consumed as knowledge files in receiving Projects. Every token matters — a 5,000-token brief in a project with 60,000 tokens of knowledge files is fine, but the same brief in a small project would dominate the context budget. Target 2,000–6,000 tokens. Be dense and structured, not verbose.
Every fact in the brief must come from an observable source — Custom Instructions, knowledge files, Memory entries, project file listings, or user-provided context. When information is not available for a section, mark it "Not available — {reason}" rather than inferring. A brief with gaps is more valuable than a brief with fabricated detail.
Always output the complete brief as a single markdown document. Never partial sections or diffs. The brief must be directly uploadable to another Project as a knowledge file.
When the user asks to create a brief for the current Project:
Step 1 — Inventory project layers. Systematically examine every available layer:
Step 2 — Assess ecosystem position. Determine how this project relates to the user's broader project portfolio:
If an ecosystem map, project registry, or equivalent cross-project document is available in context, use it to validate and enrich the assessment. If not, derive what is possible from the project's own context and Memory. Mark inferred relationships as inferred.
Step 3 — Assess project health. Capture key health indicators:
Step 4 — Assemble the brief. Produce a structured markdown document following the template in references/brief-template.md. All eight sections are mandatory. Mark sections "Not available — {reason}" when data cannot be extracted.
Step 5 — Validate and deliver.
{prefix}_PROJECT_BRIEF.md (e.g., support_PROJECT_BRIEF.md, analytics_PROJECT_BRIEF.md). A project prefix lets receiving Projects route to the correct brief explicitly when cross-project context is needed.Deliver the complete brief as a downloadable markdown file.
When the user has an existing brief and wants to check it against the current project state:
When operating in a project with many knowledge files (RAG mode), the brief builder cannot reliably extract full content from every knowledge file — retrieval returns chunks, not complete files.
Handle this gracefully:
Do not fabricate file content summaries from filenames alone. A row with "Purpose: See CI routing description" is better than an invented summary.
Briefs are consumed as knowledge files in receiving Projects. Token discipline matters.
| Project Complexity | Target Brief Length | Guidance |
|---|---|---|
| Simple (1-3 KFs, short CI) | 1,500–2,500 tokens | Keep all sections concise. Section 4 (Architecture) drives most length — keep KF summaries to one sentence each. |
| Moderate (4-8 KFs, structured CI) | 2,500–4,500 tokens | Standard detail level. Full KF inventory table. Architecture summary captures key structural decisions. |
| Complex (9+ KFs, rich CI, multiple modes) | 4,000–6,000 tokens | Maximum detail. May need to compress Section 6 (Key Decisions) to top 3 most impactful. Flag token count. |
If a brief exceeds 6,000 tokens, the primary compression targets are: Section 4 Architecture Summary (tighten CI summary, shorten KF content descriptions), Section 6 Key Decisions (reduce to top 3), and Section 8 Cross-Reference (keep only active references). Do not compress Sections 1-3 or 5 — these carry the highest context-per-token value for receiving Projects.
Input: "Create a brief for this project."
Actions:
Result: Complete brief (2,000–6,000 tokens) as a markdown file named {code}_PROJECT_BRIEF.md.
Input: User uploads an existing brief and asks "Is this still accurate?"
Actions:
Result: Staleness report identifying specific changes, followed by regenerated brief if requested.
Use when:
Do NOT use when:
Brief is too long (>6,000 tokens). Compress Architecture Summary (tighten CI description, shorten KF summaries) and Key Decisions (top 3 only). Do not compress Identity, Scope, Current State, or Ecosystem Position — these are highest value.
Cannot access knowledge file contents. Project is in RAG mode. Use CI routing descriptions for file purposes. Note partial retrieval in the brief header. Do not fabricate content summaries.
Ecosystem position is thin. No ecosystem map, registry, or cross-project context available. Derive what is possible from the project's own CI and Memory. Mark ecosystem section as "Derived from project-internal context only — verify against full portfolio view."
Brief conflicts with session handoff. These are different artifacts. A session handoff captures temporal work state for continuation in the same project. A brief captures structural project identity for cross-project reference. If both are needed in the same session, produce them as separate documents.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.