claude-md-updater — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited claude-md-updater (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyze the current conversation to identify information worth persisting in the project's instruction file, then propose the edits for approval before writing anything.
Resolve the target before drafting:
AGENTS.md exists, update it. In Claude Code, if there is no CLAUDE.md, also propose a one-line CLAUDE.md import of @AGENTS.md. Claude Code loads CLAUDE.md, not AGENTS.md.CLAUDE.md exists, update it.AGENTS.md. In Claude Code, also propose the one-line CLAUDE.md import.Show the exact patch first, then a short summary grouped by category:
## Proposed project instruction updates
--- a/AGENTS.md +++ b/AGENTS.md @@ section being changed @@ existing context line +new durable lesson, infra fact, or workflow
Summary of the diff above:
- Hard-won lessons: [one line, if any]
- Infrastructure updates: [one line, if any]
- New workflows: [one line, if any]
Apply this diff? Nothing is written until you approve.The project instruction file is team-shared, checked into git, and loaded into agent sessions. Use it for durable, infrequently changing facts, not a running log. Per the project-memory skill, keep these items out:
Route those to the client's memory feature (in Claude Code, auto memory at ~/.claude/projects/<project>/memory/) or to a gitignored local notes file (in Claude Code, CLAUDE.local.md). Putting them in shared project instructions bloats context and loads stale session facts into future sessions.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.