detect-stack — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited detect-stack (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyze the current codebase and generate .agents/stack-context.md. Run this on first use in a project, or when the stack context is missing or stale.
Scan the project root for these signals:
Language — Count file extensions (.rs, .py, .ts, .go, .swift, .java, .rb, .cs, .ex, etc.). Primary = most files. Note secondary languages.
Framework — Read the package manifest:
Cargo.toml → check [dependencies] for axum, actix, rocket, sqlx, diesel, tokiopackage.json → check for react, next, svelte, express, fastify, prismago.mod → check for gin, echo, fiber, chi, sqlcpyproject.toml / requirements.txt → check for django, flask, fastapi, sqlalchemyGemfile → check for rails, sinatraPackage.swift → check for Vapor; scan for SwiftUI importsmix.exs → check for phoenix, ectoTests — Look for test directories, test file naming patterns, test config files.
CI gates — Scan .github/workflows/, .gitlab-ci.yml, etc. for blocking checks (format, lint, type check, test).
Conventions — Check for CLAUDE.md, AGENTS.md, CONTRIBUTING.md. Note directory structure and naming patterns.
Write .agents/stack-context.md — keep it short (under 40 lines):
# Stack Context
Generated: YYYY-MM-DD
## Stack
- **Language**: [primary] [version if pinned]
- **Framework**: [web framework], [db layer]
- **Build**: [build tool]
- **Test**: [test command + framework]
- **Lint**: [linter] [CI gate: yes/no]
- **Format**: [formatter] [CI gate: yes/no]
## Secondary Languages
- [language] ([what it's used for])
## Conventions
- Error handling: [pattern]
- Module structure: [pattern]
- Naming: [pattern]
- Tests: [where they live, how they're organized]
## CI Gates
- [list of blocking checks]After writing the stack context, do not generate static reference files. Instead:
resolve-library-id then query-docs) to pull live documentationThe coding principle skills are language-agnostic by design. You are the bridge between the principles and the stack.
.agents/stack-context.md doesn't exist~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.