vault-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vault-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Agent-assisted setup that customizes the context-vault installation for the user's workflow. Always show what you plan to do before doing it. Never modify existing rules without permission.
Call context_status() (or get_context(query: "test", limit: 1) if context_status is unavailable). Report:
Read these locations silently (do not write anything yet):
~/.claude/rules/ — list all files~/.claude/rules/context-vault.md — the installed rules file (if present)CLAUDE.md in the current working directory (if it exists)~/.claude/CLAUDE.md (if it exists).cursorrules in cwd (if it exists).windsurfrules in cwd (if it exists)Report what you found:
Compare the installed rules (if any) against the user's existing instructions. Flag:
Ask the user how to resolve each conflict before proceeding.
Look in the current working directory and one level up for project roots:
package.json, Cargo.toml, pyproject.toml, go.mod, pom.xml.gitFor each project found, propose a vault bucket name (lowercase, hyphens, derived from the project name or directory). Example: my-app → bucket:my-app.
Ask: "I found these projects. Create vault buckets for them? I'll add bucket conventions to your rules."
Only proceed if the user approves.
For each approved change, show the exact content and path before writing. Changes may include:
~/.claude/rules/context-vault.md with project-specific bucket conventionsNever modify the user's own rules files (CLAUDE.md, .cursorrules, etc.). Only write to the dedicated context-vault rules file.
Print a final summary:
context-vault rules showcontext-vault uninstall~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.