repo-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited repo-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
After cloning any repository, scan for skill definitions. Replace <repo-root> below with the absolute path of the cloned repository:
find <repo-root>/.claude/skills -name "SKILL.md" 2>/dev/null
find <repo-root>/.codex/agents \( -name "*.md" -o -name "*.toml" \) 2>/dev/null
find <repo-root>/.skills -name "SKILL.md" 2>/dev/nullIf no skill files are found, skip the index output and proceed with the task.
For each skill file found, read only the metadata (YAML frontmatter for .md files, top-level fields for .toml files) to extract the name and description. Output a compact index:
<repo-skills repo="org/repo-name" path="/absolute/path/to/repo">
</repo-skills>
When a discovered skill is relevant to your current task, read its full file and follow its instructions.
If the <repo-skills> index is missing from your conversation history (e.g. after context compaction), re-scan the repo using the path from git rev-parse --show-toplevel in the repo's working directory to rebuild it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.