cross-agent-skill-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cross-agent-skill-sync (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user wants the same skill layer to be visible to multiple local agents, including Hermes, Codex, OpenClaw-style workspaces, Gemini CLI, OpenCode, Claude-adjacent setups, and generic SKILL.md consumers.
The helper is additive and dry-run-first:
node skills/software-development/cross-agent-skill-sync/scripts/cross_agent_skill_sync.mjs --target all--strategy symlink for local same-machine sharing; use --strategy copy for portable snapshots or remote machines.$HOME by default.--execute only after the dry-run plan looks correct.--require-skill <name> for must-have skills, especially bridge skills such as codex-computer-use-eu-activate.SKILL.md folders unless the local setup has that bridge.Plan a sync of the repository skills into all known local agent roots:
node skills/software-development/cross-agent-skill-sync/scripts/cross_agent_skill_sync.mjs \
--target all \
--require-skill ai-research-browser \
--require-skill oracle-ai-research-e2eAdd an external local skill, such as a Codex Computer Use activation bridge, without committing its private path:
node skills/software-development/cross-agent-skill-sync/scripts/cross_agent_skill_sync.mjs \
--target hermes \
--include-skill /path/to/codex-computer-use-eu-activate/skill/codex-computer-use-eu-activate \
--require-skill codex-computer-use-eu-activateExecute after review:
node skills/software-development/cross-agent-skill-sync/scripts/cross_agent_skill_sync.mjs \
--target all \
--strategy symlink \
--execute \
--out /tmp/cross-agent-skill-sync-report.jsonRun the deterministic tests:
node --test skills/software-development/cross-agent-skill-sync/tests/cross_agent_skill_sync.test.mjsThen run the repository-wide public safety audit:
scripts/audit-public-safety.shinstall: destination is missing and will be created when --execute is set.installed: destination was created in this run.exists: destination already exists and was left untouched.conflict: destination exists with different content or an unexpected shape; manual review needed.missing-required-skill: a required skill was not found in the selected sources.This skill shares instructions and helper files. It does not share browser cookies, provider sessions, private memories, shell histories, token files, or agent transcripts.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.