fallow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited fallow (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <picture> <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/fallow-rs/fallow/main/assets/logo-dark.svg"> <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/fallow-rs/fallow/main/assets/logo.svg"> <img src="https://raw.githubusercontent.com/fallow-rs/fallow/main/assets/logo.svg" alt="fallow" width="290"> </picture><br> <strong>Agent skills for the JavaScript and TypeScript codebase intelligence layer.</strong><br><br> <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/License-MIT-blue.svg" alt="MIT License"></a> <a href="https://github.com/fallow-rs/fallow-skills/actions/workflows/validate.yml"><img src="https://github.com/fallow-rs/fallow-skills/actions/workflows/validate.yml/badge.svg" alt="CI"></a> <a href="https://agentskills.io"><img src="https://img.shields.io/badge/Agent_Skills-compatible-8A2BE2" alt="Agent Skills"></a> <a href="https://github.com/fallow-rs/fallow"><img src="https://img.shields.io/badge/fallow-v2.102.0-orange" alt="fallow v2.102.0"></a> </p>
Agent skills for fallow, Rust-native codebase intelligence for JavaScript and TypeScript. The free static layer reports quality, changed-code risk, cleanup opportunities, circular dependencies, code duplication, complexity hotspots, and architecture boundary violations in milliseconds. The optional paid runtime layer (Fallow Runtime) adds production execution evidence so agents can delete cold code, flag hot-path changes, and retire stale flags with proof. 118 framework plugins, zero configuration. Works with any agent that supports the Agent Skills specification: Claude Code, Cursor, OpenAI Codex, Windsurf, GitHub Copilot, Gemini CLI, Amp, and 30+ more.
Linters enforce style. Formatters enforce consistency. Fallow enforces relevance. Linters work file by file. TypeScript works type by type. Neither builds the full module graph, so neither can see what nothing depends on. Fallow does, in milliseconds. These skills teach agents how to use fallow effectively: which commands to run, what flags to use, how to interpret output, and how to avoid common pitfalls.
npx skills add fallow-rs/fallow-skills/install fallow-rs/fallow-skillsnpx skills add fallow-rs/fallow-skills --agent windsurf
npx skills add fallow-rs/fallow-skills --agent amp
gemini skills install https://github.com/fallow-rs/fallow-skills.gittmp=$(mktemp -d)
git clone https://github.com/fallow-rs/fallow-skills.git "$tmp/fallow-skills"Copy the fallow skill directory into your agent's skills folder:
# OpenAI Codex, Amp, and agents using the shared Agent Skills location
mkdir -p ~/.agents/skills
cp -R "$tmp/fallow-skills/fallow/skills/fallow" ~/.agents/skills/fallow
# Claude Code
mkdir -p ~/.claude/skills
cp -R "$tmp/fallow-skills/fallow/skills/fallow" ~/.claude/skills/fallow
# Cursor
mkdir -p ~/.cursor/skills
cp -R "$tmp/fallow-skills/fallow/skills/fallow" ~/.cursor/skills/fallow
# Windsurf
mkdir -p ~/.codeium/windsurf/skills
cp -R "$tmp/fallow-skills/fallow/skills/fallow" ~/.codeium/windsurf/skills/fallow
# GitHub Copilot
mkdir -p .github/skills
cp -R "$tmp/fallow-skills/fallow/skills/fallow" .github/skills/fallow<details> <summary>Other agents</summary>
Use npx skills add fallow-rs/fallow-skills --all for installer-managed discovery, or copy fallow/skills/fallow into your agent's skills location as fallow. This skill follows the open Agent Skills specification and works with any compatible agent.
</details>
Fallow must be installed in the target project:
npm install -g fallow # prebuilt binaries
npx fallow # or run without installingSee the installation guide for all options including cargo install fallow-cli.
| Skill | Description | Trigger phrases |
|---|---|---|
| fallow | Codebase intelligence for JS/TS: quality, changed-code risk, cleanup opportunities, circular deps, duplication, complexity, and (with Runtime) hot-path and cold-path evidence | "check code health", "audit this PR", "find cleanup opportunities", "find duplicates", "what code actually runs" |
| Category | What it does |
|---|---|
| Cleanup | Find unused files, exports, types, dependencies, enum/class members, stale suppressions, and other safe cleanup candidates |
| Duplication | Find code clones with 4 modes: strict, mild, weak, semantic |
| Complexity | Function complexity analysis, hotspot detection, health scores |
| Auto-Fix | Remove unused exports and dependencies with dry-run preview |
| CI | GitHub Actions, SARIF upload, baseline comparison, PR-scoped checks |
| Monorepo | Per-workspace analysis with cross-package resolution |
| Debug | Trace export usage chains, file edges, and dependency usage |
Once installed, you can use natural language:
User: "Find all unused exports"
↓
Agent loads fallow skill
↓
Skill instructs: run `fallow dead-code --format json --quiet --unused-exports`
↓
Agent executes command, parses JSON output
↓
Agent summarizes findings with file paths and line numbersThe skill provides agents with:
--yes in non-TTY--traceSee CLAUDE.md for repository structure, skill creation guidelines, and quality standards.
MIT. See LICENSE for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.