agentsmd-scaffold — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agentsmd-scaffold (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to generate a small, evidence-backed AGENTS.md stack for a repository. The output may be a plan, exact proposed file contents, or applied files when the user explicitly asks to write them.
This skill is for instruction scaffolding. Use repo-agent-context-audit first when the user only asks whether the repo's agent context is healthy.
Default to a scoped plan before editing. Only write or modify AGENTS.md, CLAUDE.md, WARP.md, hooks, settings, or generated docs when the user has explicitly asked to apply the scaffold.
Direct actions:
AGENTS.md plan with evidence and validation commands.Escalate before:
AGENTS.md, CLAUDE.md, or WARP.md instead of adding ashort pointer or scoped complement.
Evidence-backed pushback:
evidence supports them.
Feedback loop:
references/scaffold-agents.md, scannersignals, or eval prompts.
Run the scanner from this skill directory when possible:
python3 scripts/scan_repo_context.py <repo-root>
python3 scripts/scan_repo_context.py <repo-root> --jsonThen inspect the files that matter:
AGENTS.md, CLAUDE.md, WARP.md, .claude/instructions.md, and.github/copilot-instructions.md
README.md, CONTRIBUTING.md, package manifests, Makefiles, CI workflows,and documented test commands
payments, registry metadata, generated clients, and production operations
Do not infer commands or ownership from names alone. Use scanner output as a lead, then verify with actual files.
Read references/scaffold-agents.md before proposing files. Choose the smallest stack that changes agent behavior:
AGENTS.md for repo-wide routing and validationAGENTS.md only where directory rules differ from rootmanually validated
Before editing, report:
## Scoped AGENTS Plan
| Path | Why here | Rules to include | Validation |
|---|---|---|---|
| `AGENTS.md` | <repo evidence> | <root topics> | `<command>` |
| `<dir>/AGENTS.md` | <repo evidence> | <scoped topics> | `<command>` |
## Files To Preserve
- `<existing high-context file>` - <how it will be referenced or left alone>
## Open Facts
- <missing command or ownership fact that cannot be inferred>When applying the scaffold:
rules, and validation commands
missing
command
| Situation | Action |
|---|---|
Existing CLAUDE.md or WARP.md is already a good router | Add a short AGENTS.md pointer only if cross-runtime routing helps. |
| Root instruction file exceeds roughly 200 lines | Propose root router plus scoped files or references. |
| Directory has generated outputs | Add scoped rules naming source of truth and regenerate/check commands. |
| Directory has distinct safety rules | Add scoped rules with escalation boundaries. |
| Directory has ordinary implementation files only | Keep guidance in root unless conventions differ. |
| Commands cannot be verified from repo evidence | Leave an open fact instead of guessing. |
AGENTS.md files for every directory. Add them only wherelocal rules differ from root.
Cite the manifest, CI workflow, script, or docs that prove the command.
CLAUDE.md, WARP.md, or AGENTS.md just tonormalize naming. Preserve it, point to it, or propose a split first.
AGENTS.md; route toreferences or existing docs instead.
After applying changes:
the new instructions when practical
python3 scripts/scan_repo_context.py <repo-root> if using the bundledscanner to confirm scoped files are discoverable
If verification cannot run, report the exact missing precondition and the command that should be run later.
scripts/scan_repo_context.py: read-only scanner for high-context files,command hints, specs, local skills, and scoped AGENTS.md candidates.
references/scaffold-agents.md: scaffold selection rules and templates forroot, generated metadata, scripts/tools, skill libraries, and tests.
evals/evals.json: lightweight prompts for future behavior checks.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.