github-readme — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited github-readme (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create or improve README files that accurately explain what a repo does, how to run it, and how a practical user should start.
Write polished, complete README.md files for GitHub repositories in a direct, technical, practitioner-focused voice.
Use this skill when the user starts with readme or gr, or asks to write, rewrite, or document a repository README.
readme [paste repo description, file list, or context]
gr [GitHub URL or repo name + description]
write a readme
generate readme
readme for this repo
document this repo
rewrite my readmeChoose the closest repo type before writing anything. That choice determines the section set.
| Type | Examples | Typical Sections |
|---|---|---|
| Skills or config library | Anthropic, PiHole blocklists | Overview, contents table, install, repo structure, related repos |
| Code toolkit or multi-module repo | AlpacaTrading, SafeSend | Overview, what it does, feature table, repo structure, setup, env vars, usage by module, errors, license |
| Single script or utility | PowerShell automation scripts | Overview, what it does, prerequisites, usage, parameters, examples, license |
| MCP server | homeassistant-mcp, pihole-mcp | Overview, what it does, tools table, install and config, usage, notes, license |
| API integration or webhook | SafeSend webhooks | Overview, what it does, endpoint table, auth, payload schemas, setup, examples, license |
| Python application or CLI | Trading bots, analyzers | Overview, what it does, prerequisites, install with venv and requirements, usage, config, errors, license |
| Hybrid PowerShell and Python repo | Trading | Overview, what it does, structure split by language, setup per stack, usage by module, tests, license |
| Static site or website | mickpletcher.com | Overview, local preview, structure, deployment, content editing notes, license |
| Template or starter repo | repo scaffolds | Overview, what you get, how to use the template, customization points, license |
If the repo does not fit neatly, pick the closest type and drop irrelevant sections.
Pull from the best available source in this order:
README.mdExtract the repo purpose, languages, major folders and scripts, dependencies, setup steps, intended audience, and any non-obvious constraints.
When current details matter and a URL is provided, verify them before writing.
A README that documents commands that do not run is worse than no README. When the repo is locally available or a URL was provided, verify before writing:
When the repo is not available and the user only gave a description, mark unverified specifics plainly, for example <!-- verify: entry point name -->, instead of inventing plausible-looking commands.
Build a complete README.md that fits the repo instead of filling a fixed template.
When the repo already has a README and the user wants it fixed rather than replaced:
Use only the sections that fit the repo.
# [Repo Title]Use a readable H1 that matches the repo name. Do not add a marketing tagline.
Example:
# Alpaca Trading ToolkitPut one plain sentence under the H1 explaining what the repo is and what it does.
## OverviewWrite 2 to 4 sentences describing what the repo contains and who it is for. Do not put setup steps here.
## What This DoesUse for toolkits or multi-module repos when a plain overview is not enough.
## Skills, ## Modules, or ## ToolsUse a table when the repo has multiple components.
Skills example:
| Skill | Trigger | Description |
| --- | --- | --- |
| [skill-name](link) | `trigger` | What it does in one sentence |Code toolkit example:
| Module | Purpose | Typical User | Main Outputs |
| --- | --- | --- | --- |
| `src/` | PowerShell module suite for the Alpaca API | PowerShell engineers | account objects, order results |MCP server example:
| Tool | Description |
| --- | --- |
| `tool_name` | What the tool does |## Repository StructureUse an annotated file tree when the repo shape matters.
RepoName/
|-- README.md
|-- module/
| |-- file.ps1 # What this file does
| `-- file.py # What this file doesFor larger repos, annotate folders instead of every file.
## PrerequisitesUse a short list of required software, tools, accounts, or versions. Do not put setup steps here.
## Installation or ## SetupUse numbered steps with exact commands. Avoid vague instructions.
For skills repos, include the relevant skills path and installation flow only if the repo really needs them.
For code repos, include clone, environment setup, dependency install, and config setup when applicable.
## Environment VariablesUse a table with Variable | Required | Example | What It Controls when the repo uses environment-based config.
## UsageShow the safest, simplest command first. For multi-module repos, use one subsection per major component when needed.
## Common ErrorsUse a Problem | Likely Cause | Fix table only when the repo has non-obvious failure modes.
## Security NotesUse a short factual list for repos that handle credentials, keys, or sensitive data.
## Related RepositoriesAdd a Repo | Description table when related repos help orient the reader.
## BlogUse only when it clearly helps a public-facing repo. Keep it to one line.
## LicenseKeep it last. Match the actual repo license.
Example:
## License
This project is licensed under the MIT License. See `LICENSE` for the full text.The tone should be direct, technical, and practical. It should sound like someone who has used the repo, not like product copy.
What it should sound like:
What it should not sound like:
Produce the complete README.md content directly in the response unless the user specifically asks for a file edit in a local repo.
If the user is asking about a real local repository, base the README on the actual repo structure and docs instead of guessing.
When you finish, briefly confirm:
If the user is not sure how to use this skill, asks what it needs, or asks for examples:
Minimum useful input:
Example prompts:
Use github-readme to draft a beginner friendly README for my PowerShell automation repo.Rewrite this README so it matches the actual repo structure and setup steps.Show me a sample prompt for asking this skill to create a practical README from a repo scan.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.