classmap-maintain — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited classmap-maintain (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Maintain CLASSMAP.md so an agent can answer: "Which code should I inspect for this behavior, and where does its responsibility end?"
Keep it a small, human-readable index of useful entrypoints and responsibilities.
CLASSMAP.md and inspect the relevant source/module structure. Consult README.md, CODEMAP.md, CONTEXT.md, or specific docs only where they help identify entrypoints; do not read all documentation by default.Include code that helps a future task choose where to look:
Do not inventory routine DTOs, wrappers, helpers, or tests. Include one only when its responsibility is useful for routing. Record callers or dependencies only when they clarify where to look next, not as a complete relationship list.
For a new map, default to one table with three pieces of information: a feature or change cue, the primary code path, and its responsibility. Add a boundary only when it prevents confusion. For example:
# CLASSMAP.md
Use this index to choose candidate files, then verify current code. Entries cover the main behaviors, not every file.
| Feature / change cue | Primary code | Responsibility and boundary |
|---|---|---|
| Login validation, failed-login policy | `src/auth/LoginService.ts` | Coordinates login checks; token creation belongs to TokenService. |
| Token creation, refresh | `src/auth/TokenService.ts` | Owns token generation and refresh rules. |Use repository-relative paths, adding a symbol name when a file has several distinct responsibilities. Follow the project's documentation language. The example paths are illustrative; use verified project paths in the actual map.
Add short notes or feature groupings only when they help navigation. Avoid duplicating the table in a second set of per-file entries. Kind, caller lists, dependency lists, tests, confidence labels, and positive/negative change conditions are not required fields.
Keep only facts that help locate code or distinguish responsibilities. Leave terminology in existing domain docs such as CONTEXT.md, decisions in design docs or docs/adr/, and plans in task docs. Do not create those documents as part of this skill.
Keep maintenance in Markdown; no dependency graph, full call-chain catalog, or automated indexing infrastructure is needed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.