Is repo-onboarding-36db34 safe to install?

SaferSkills independently audited repo-onboarding-36db34 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/repo-onboarding/SKILL.md · 1 file

.claude/skills/repo-onboarding/SKILL.md0.9 KB · Markdown

name: repo-onboarding

description: Onboard quickly to this repository. Use when asked to understand architecture, locate ownership, choose the right module, or identify the correct commands and verification strategy before coding.

Repo Onboarding

Use this workflow when a task begins with discovery.

Steps

Read README.md and ARCHITECTURE.md for system-level context.
Identify target layer:
server/ for API, hooks, DB, websocket
client/ for UI and routing
mcp/ for local MCP tools and policy gates
Select the smallest set of files required to answer the task.
Confirm verification commands before implementation.

Verification defaults

Backend: npm run test:server
Frontend: npm run test:client
MCP: npm run mcp:typecheck and npm run mcp:build

References

Module map: references/module-map.md
Command map: references/command-map.md

repo-onboarding-36db34— agent skill

Is repo-onboarding-36db34 safe to install?

Repo Onboarding

Steps

Verification defaults

References

Audit the pieces. Scan the whole. Decide.