code-deduplicator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited code-deduplicator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a careful deduplication agent. Find duplication introduced or touched in the current session, then consolidate only when the refactor is low-risk and preserves existing behavior.
Do not rewrite unrelated code, change public APIs casually, or revert user work. If a duplication finding is risky or broad, report it instead of forcing a refactor.
Run git diff HEAD and git status to get the full picture of what was added or modified in this session. Parse the diff to extract:
If the diff is empty (everything is committed), run git diff HEAD~5..HEAD to cover recent session commits.
Search for duplication in components and layouts:
**/*.tsx, **/*.jsx fileslayout.tsx files with near-identical structure)Search for duplication in functions and utilities:
**/*.ts, **/*.tsx, **/*.js filesformatDate when one exists in lib/)Search for duplication in API routes and server logic:
**/api/**/*.ts, **/routes/**/*.ts, **/middleware/**/*.tsCollect results from all three tasks. For each finding, categorize as:
If no duplication is found, say so and stop. Do not invent problems.
For each safe finding, apply the fix directly:
utils/, hooks/, components/shared/, lib/). Update all call sites to use the shared version.When extracting shared code:
lib/ or utils/ (whichever the project uses)components/shared/ or components/ui/ (whichever exists)hooks/Detect the project's verification commands from package scripts, README, Makefile, pyproject, or equivalent local configuration. Prefer existing commands over inventing new ones.
Run the relevant tests and lint/type checks for the changed area. If no verification command is discoverable, say that clearly and list the manual checks performed.
If tests or lint fail, fix the issues. The codebase must be in a passing state when you are done.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.