study-repos-first — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited study-repos-first (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A study is a curated reference collection — a directory of upstream specs, prior art, reference implementations, papers, or codebases — pinned as git submodules before a decision is made or a feature is built. It is not a project (it ships nothing) and not documentation (it lives, it's checked-out code). It is a reading list with structure, pinned so it never rots out from under us.
This skill is foundational and iterative. It will be expanded as we work through real studies together. Treat the contents as the current best understanding, not the final word.
ai-labs/ (or any pseudomonorepo) where the question is about conventions — naming, file shapes, folder layouts, schemas, protocols, manifest formats — rather than novel logicstudies/<topic-slug>/ directorylossless-group/study-<slug> pattern)Don't paraphrase from training data when pinned upstream code is — or could be — one `cd` away.
When a domain question comes up:
ai-labs/studies/ (and any studies/ directory walking up the tree). If a study exists, read from the pinned submodules, not from memory.studies/<topic>/<repo>/<file>:<line> — so the user can jump to the upstream source.llms.txt is a hot take that will rot.The two failure modes this skill exists to prevent:
| Is | Isn't |
|---|---|
| A curated reference collection pinned at known SHAs | A summary or paraphrase of those references |
| Scoped to a single domain question | A junk drawer of "stuff we might read someday" |
| Read from during development to answer concrete questions | A teaching or onboarding artifact |
| Self-contained — submodules nest inside the study | A project that ships, builds, or runs in CI |
| Stable — submodule SHAs are pinned and don't auto-bump | Living docs that update on every upstream commit |
Follow studies/README.md (the canonical version in each pseudomonorepo) and studies/CLAUDE.md. The shape:
README.md first; everything else hangs off it.studies/<topic-slug>/. Use a slug that reads naturally (open-specs-and-standards, not oss).context-v/inquiry/ (or similar) folder for in-progress notes, tree dumps, and findings. Inquiry notes are yours, separate from the upstream material.lossless-group/study-<topic-slug> and make it a single submodule of ai-labs. The in-place subdirectory becomes a submodule pointer; the study's nested references stay nested. See open-specs-and-standards/ as the worked example.The user may say "add a reference" or "extend the study". Default workflow:
From inside the study directory (e.g. studies/open-specs-and-standards/):
git submodule add <repo-url> <local-path>The <local-path> should be a sensible slug derived from the repo name. After adding, the parent's .gitmodules will gain a new entry and the gitlink will appear unstaged.
llms.txt does isn't a study — it's a hot take that will rot. The upstream repo is the artifact.This skill composes with the others:
studies/ lives inside a pseudomonorepo. Walk up the tree to check whether a parent-level study covers the same question before creating one in a child.context-v/ (questions you're chasing, comparisons you're making) follow context-vigilance conventions: frontmatter, wikilinks, the four cognitive modes.new(study): ..., update(study): add <ref>).When working on a study, multiple skills apply. Don't pick one — let them all inform what you do.
pwd. Walk up to find the nearest studies/ directory (and any nested ones).studies/<slug>/README.md for the question.studies/README.md (in each pseudomonorepo) — canonical concept doc, current studies indexstudies/CLAUDE.md (in each pseudomonorepo) — operational instructions for working in studies/pseudomonorepos/SKILL.md — the surrounding tree-walking disciplinecontext-vigilance/SKILL.md — conventions for inquiry notes that live in context-v/Status: foundational. This skill will grow as we work through real studies. Expected refinements over time: concrete patterns for inquiry notes, reusable READMEs, the "promote to standalone repo" mechanics, the comparison/extraction templates, and the boundary between "study" and "project".
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.