onboard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited onboard (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guide users through setting up codingbuddy in a new project via interactive, step-by-step onboarding. Detect the tech stack automatically, generate configuration, and create adapter files for their AI tools.
Scan the project root to detect:
Package managers & languages:
package.json → Node.js/TypeScript (check for typescript dep)requirements.txt / pyproject.toml / setup.py → Pythongo.mod → GoCargo.toml → Rustpom.xml / build.gradle → Java/KotlinGemfile → Rubycomposer.json → PHPFrameworks (from dependency files):
Test setup:
Monorepo indicators:
workspaces in package.json, lerna.json, pnpm-workspace.yaml, nx.json, turbo.jsonAI tools already present:
.cursor/ → Cursor.claude/ → Claude Code.antigravity/ → Antigravity (Gemini).codex/ → Codex.q/ → Amazon Q.kiro/ → Kiro.github/copilot/ → GitHub CopilotAfter scanning, present findings to the user:
Detected:
- Language: TypeScript
- Framework: Next.js 14, React 18
- Test: Vitest
- Monorepo: Yarn workspaces
- AI tools: .claude/ (existing)Ask: "Does this look correct? Anything to add or change?" (use AskUserQuestion)
Based on detected info, generate a draft config:
{
"language": "en",
"techStack": {
"languages": ["typescript"],
"frameworks": ["nextjs", "react"],
"testing": ["vitest"],
"packageManager": "yarn"
},
"architecture": {
"pattern": "layered",
"monorepo": true
},
"agents": {
"primary": "software-engineer",
"specialists": ["frontend-developer", "test-engineer"]
}
}Ask the user to confirm or adjust:
Write codingbuddy.config.json to project root after confirmation.
Based on detected AI tools (or ask which tools the user wants to set up):
| Tool | Config Path | What to Create |
|---|---|---|
| Cursor | .cursor/rules/codingbuddy.mdc | Rules include pointing to .ai-rules |
| Claude Code | .claude/settings.json + CLAUDE.md | MCP server config + instructions |
| Antigravity | .antigravity/rules/codingbuddy.md | Gemini rules file |
| Codex | .codex/AGENTS.md | Codex agent instructions |
| Amazon Q | .q/rules/codingbuddy.md | Q rules file |
| Kiro | .kiro/rules/codingbuddy.md | Kiro rules file |
For each selected tool:
.ai-rules/ rulesAsk: "Which AI tools do you want to configure?" (use AskUserQuestion with multiSelect)
Present two options:
Option A: Copy rules locally (recommended for customization)
packages/rules/.ai-rules/ into the project as .ai-rules/Option B: Install via npm package
npm install codingbuddy-rules / yarn add codingbuddy-rulesnode_modules/codingbuddy-rules/.ai-rules/Ask: "How would you like to set up the AI rules?" (use AskUserQuestion)
If Option A: copy the rules directory and confirm. If Option B: run the install command and update adapter configs to point to node_modules path.
Present a summary of everything that was created:
Onboarding complete!
Created files:
- codingbuddy.config.json (project configuration)
- .claude/settings.json (Claude Code MCP config)
- .ai-rules/ (shared AI coding rules)
Next steps:
1. Review codingbuddy.config.json and adjust settings
2. Start with: PLAN <your first task>
3. Use AUTO mode for autonomous development cycles
4. Run /help to see available commands~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.