Cortex — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cortex (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Project knowledge base for Claude Code.
Cortex analyzes your repository and writes .claude/docs/ — structured context files Claude Code reads before touching any file. It knows which parts of the codebase break most often, why certain decisions were made, and where the security risks are.
Not documentation you write. Knowledge extracted from your actual project history.
curl -fsSL https://raw.githubusercontent.com/kovalenko-tech/cortex/main/install.sh | bashOr with npx — no install required:
npx @kovalenko-tech/cortex-ai analyzeRequires Python 3.11+.
cd your-project
cortex setup # interactive wizardOr directly:
cortex analyze
git add .claude/
git commit -m "add cortex context"Before writing a single line of code, Claude Code gets this for every file:
> ⚡ Fresh — analyzed 2026-03-22 UTC
> 🔴 HIGH RISK (score: 65/100) — 12 bug fixes · no test coverage
## Historical Insights
- [Bug Fix] 2024-03-15: Session fails on UTC+0 timezone
Fix: Always use datetime.timezone.utc
## Decisions & Context
- ✅ Chose JWT over sessions for stateless auth — PR #234 @john
- 🚫 Don't call authenticate() before db.init() — PR #156 @maria
## Edit Checklist
- Run: pytest tests/test_auth.py -v
- Check: SESSION_TIMEOUT in config/settings.py
## Related Files
- tests/test_auth.py [co-change: 92%]
- middleware/session.py [co-change: 67%]
## Security Notes
- ✅ No issues foundcortex setup interactive setup wizard
cortex analyze analyze full project
cortex analyze --since HEAD~20 only changed files
cortex analyze --no-llm skip AI summaries
cortex analyze --no-cache force full re-analysis
cortex init generate CLAUDE.md
cortex context src/auth.py show context for one file
cortex status analysis status + freshness + risk
cortex risks files sorted by risk score
cortex freshness context staleness per file
cortex security security audit only
cortex deps dependency vulnerability scan
cortex mine-prs mine GitHub PR decisions
cortex diff main update changed files vs branch
cortex install-hook auto-update on every commit
cortex watch auto-update on new commits
cortex clean remove all context files
cortex mcp start MCP server for Claude CodeAdd to .claude/settings.json for automatic context injection:
{
"mcpServers": {
"cortex": {
"command": "cortex",
"args": ["mcp"]
}
}
}Mine implicit decisions from PR discussions:
export GITHUB_TOKEN=ghp_...
cortex mine-prs
cortex analyzeexport ANTHROPIC_API_KEY=sk-ant-...
cortex analyzeUses Claude Haiku to generate a 2–3 sentence technical overview per file. Optional — all other features work without an API key.
Full documentation: https://kovalenko-tech.github.io/cortex/docs.html
MIT — kovalenko-tech/cortex
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.