gen-startup-bat — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gen-startup-bat (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read in order of preference:
CLAUDE.md — look for dev command blocks and port infoclient/, frontend/, web/, app/, then repo root package.json; for monorepos also inspect pnpm-workspace.yaml, package.json workspaces, turbo.json, and nx.json*.sln → referenced *.csproj; if no .sln is useful, search for *.csproj and prefer web/API projects with Properties/launchSettings.jsonREADME.md — fallback if no structured config foundIdentify:
npm run dev, without cd).csproj file name → default to dotnet run --project .\<name>.csprojlaunchSettings.json → select a commandName: "Project" profile when available → read applicationUrl; preserve the full URL list and prefer HTTPS only when choosing a browser/API URLvite.config.* / quasar.config.* / framework config server.port; if not found, infer common defaults from scripts/frameworksdev, start, or framework-specific dev script over one that only contains build/test scripts.vite, quasar, next, nuxt, react-scripts, astro, etc.) rather than shared libraries.pnpm-lock.yaml → pnpmyarn.lock → yarnbun.lock or bun.lockb → bunpackage-lock.json → npmnpm run dev or npm startpnpm dev or pnpm startyarn dev or yarn startbun run dev or bun start.csproj files referenced by the .sln; otherwise search recursively.Microsoft.NET.Sdk.Web, launchSettings.json, names containing Api, Web, Server, or Backend, or references to ASP.NET Core packages.Properties/launchSettings.json, ignore IIS Express profiles unless no Project profile exists.applicationUrl contains multiple URLs separated by ;, keep them all. Use the first HTTPS URL as the preferred backend URL; otherwise use the first HTTP URL.dotnet run --project .\<name>.csproj by default from the backend project directory. Offer dotnet watch --project .\<name>.csproj only as an alternative, not the default.Present findings and ask (one message, all at once):
dotnet watch --project .\<name>.csproj as alternative)20)<projectName>.bat at project root, where <projectName> is the working directory folder name)Use the template in REFERENCE.md.
Fill in variables:
{backendLabel} — {projectName} - API (derive {projectName} from working directory folder name){frontendLabel} — {projectName} - Client{backendDir} — absolute path to backend project folder{backendCommand} — dotnet run --project .\<name>.csproj (default) or dotnet watch --project .\<name>.csproj{frontendDir} — absolute path to frontend folder{frontendCommand} — dev command without cd{browserDelay} — seconds to wait before opening browser (default: 20){browserUrl} — confirmed URLEscape generated .bat values carefully:
cmd /k string: cd /d ""C:\Path With Spaces""Write the file to the specified output path.
Tell the user:
.bat file~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.