setup-custom-libraries — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited setup-custom-libraries (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Register or update custom Simulink block libraries so the agent prefers them over built-in blocks during model building.
.slx files to an existing library configurationbuilding-simulink-models routes here via the policy gate (gatePass: false)found: false — that means no custom libraries are configured and the user hasn't asked for them.slx library file) → use building-simulink-models skill with model_edit directly. This skill only registers existing libraries; it cannot create library content.configuring-block-policysimulink-curating-library-kgDo this FIRST and ALONE — no other tool calls in the same message.
Call library.settingsLookup() — returns a struct with resolved absolute paths:
found — whether a libraries file was located (satk-libraries.json or legacy reuse-libraries.json)enabled — whether custom libraries are configuredgatePass — whether the gate is satisfieddataRoot — absolute path to the directory containing .satk/kgIndexPath, librariesPath, policyPath — absolute paths to data filesInterpret the result:
dataRoot as the target.Follow references/library-setup.md for all gate API details — it is the single source of truth for API calls, examples, and options at each gate.
Gate 1 — Library declaration: Only when the user explicitly asked to set up custom libraries and no libraries file exists yet. STOP and ask the user about reusable libraries. Present two options: Yes (declare libraries) or None (no libraries right now). Do not read reference files, open models, or plan blocks until they respond.
prefdir via library.LibraryConfig.save(prefdir(), libraries).Gate 2 — Block policy: If .satk/block-policy.json is missing, STOP and ask the user about policy setup by following references/library-setup.md. Do not proceed until policy is resolved.
Gate 3 — Library blocks knowledge index: If the KB is empty (index.md contains populated: false) or missing, STOP and ask the user whether to index their library blocks so the agent knows which blocks are available during model building. Offer two options: Automatic (agent infers categories/descriptions autonomously) or Guided setup (interactive curation). Both invoke the simulink-curating-library-kg skill. Follow references/library-setup.md for details. Do not proceed until KG generation completes.
Retrieve and display the user's current configuration status using the APIs in references/library-setup.md § "Status Display (Management Menu)". Show library names/paths, policy mode with fallback, and KG block/category counts. Then offer:
library.LibraryConfig.load(dataRoot), append/remove entries, save via library.LibraryConfig.save(dataRoot, allLibs), then invoke simulink-curating-library-kg skill (automatic mode) to regenerate KG.configuring-block-policy skill.project or legacy. Copy .satk/ folder to prefdir/.satk/ (expand relative paths to absolute). See references/library-setup.md § "Gate 1" for the promote API.simulink-curating-library-kg skill.When satk-libraries.json already exists with declared libraries: read the existing config, append the new library entries, save via library.LibraryConfig.save(), then invoke the simulink-curating-library-kg skill (automatic mode) to infer categories/descriptions for the new blocks and regenerate the knowledge index.
references/library-setup.md for each case.references/library-setup.md.----
Copyright 2026 The MathWorks, Inc.
----
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.