d9-fork-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited d9-fork-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Set up a complete d9 development environment from scratch. This skill covers all the pitfalls that typically make Directus fork setup take 2 days for a new developer, reducing it to approximately 2 hours.
node-v24-windows-escape skill)npm install -g pnpm@10 git clone https://github.com/AurelienMusic/directus9.git
cd directus9 pnpm install # Copy the env template
cp api/src/cli/utils/create-env/env-stub.liquid api/.env
# Edit api/.env with your database credentials
# Minimum required:
# DIRECTUS_SECRET=your-random-secret-here
# DIRECTUS_DB_CLIENT=pg (or mysql, sqlite3)
# DIRECTUS_DB_CONNECTION_STRING=postgres://user:pass@localhost:5432/d9 pnpm build cd api
npx directus database install
npx directus database migrate:latest
cd .. cd api
npx directus users create --email [email protected] --password your-password --role admin
cd .. pnpm devpnpm build (step 7) causes import errors because internal packages haven't been compiled. The error messages point to missing modules that ARE in the repo but need building first. This is the #1 onboarding trap. (2h average debug time)api/src/cli/utils/create-env/env-stub.liquid has all variables with documentation. (30min)pnpm-lock.yaml format is version-specific. (1h)pnpm dev before database install + migrate:latest causes API crashes with missing table errors. (30min).env causes the server to use a default value, which is a security vulnerability. It also causes sessions to invalidate on every restart. (Silent security issue)DIRECTUS_* environment variables to D9_* — the engine expects the DIRECTUS_ prefix (see preserve-directus-code-identifiers skill)pnpm build even if you only want to work on the app — API packages are dependencies~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.