repo-graph-debug — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited repo-graph-debug (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Paste the error, get the code. The on-ramp when something's broken — instead of grepping file names out of a traceback and opening each one.
path::test_name), or a diff / list of changed files.locate with signal=<the raw stacktrace / test id / unified diff>. It sniffs the shape (or pass kind=stacktrace|test|diff), resolves the frames/symbols/paths to nodes, then ranks the surrounding subgraph by relevance (Personalized PageRank). Pass mode=prose for primed prose context instead of a ranked list.read with node=<top result> to pull that node's exact source, sliced from its file by the graph's line span — no grep, no scrolling. Add context_lines=N for padding around it.impact on the node for blast radius (it takes several comma-separated nodes — feed it the whole changed set), or neighbours for direct callers/callees.locate only resolves frames that actually exist in the graph — if it returns nothing, the signal's paths/symbols don't match this repo; fall back to find with a keyword.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.