repomix — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited repomix (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Repomix packs entire repositories into single, AI-friendly files. Perfect for feeding codebases to LLMs like Claude, ChatGPT, and Gemini.
Use when:
repomix --version# npm
npm install -g repomix
# Homebrew (macOS/Linux)
brew install repomix# Package current directory (generates repomix-output.xml)
repomix
# Specify output format
repomix --style markdown
repomix --style json
# Package remote repository
npx repomix --remote owner/repo
# Custom output with filters
repomix --include "src/**/*.ts" --remove-comments -o output.mdProcess remote repositories without cloning:
# Shorthand
npx repomix --remote yamadashy/repomix
# Full URL
npx repomix --remote https://github.com/owner/repo
# Specific commit
npx repomix --remote https://github.com/owner/repo/commit/hashStrip comments from supported languages (HTML, CSS, JavaScript, TypeScript, Vue, Svelte, Python, PHP, Ruby, C, C#, Java, Go, Rust, Swift, Kotlin, Dart, Shell, YAML):
repomix --remove-comments# Package feature branch for AI review
repomix --include "src/**/*.ts" --remove-comments -o review.md --style markdown# Package third-party library
npx repomix --remote vendor/library --style xml -o audit.xml# Package with docs and code
repomix --include "src/**,docs/**,*.md" --style markdown -o context.md# Package specific modules
repomix --include "src/auth/**,src/api/**" -o debug-context.xml# Full codebase context
repomix --remove-comments --copy# Include specific patterns
repomix --include "src/**/*.ts,*.md"
# Ignore additional patterns
repomix -i "tests/**,*.test.js"
# Disable .gitignore rules
repomix --no-gitignore# Output format
repomix --style markdown # or xml, json, plain
# Output file path
repomix -o output.md
# Remove comments
repomix --remove-comments
# Copy to clipboard
repomix --copy# Use custom config file
repomix -c custom-config.json
# Initialize new config
repomix --init # creates repomix.config.jsonRepomix automatically counts tokens for individual files, total repository, and per-format output.
Typical LLM context limits:
Repomix uses Secretlint to detect sensitive data (API keys, passwords, credentials, private keys, AWS secrets).
Best practices:
.repomixignore for sensitive files.env filesDisable security checks if needed:
repomix --no-security-checkWhen user requests repository packaging:
For detailed information, see:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.