agents-md-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agents-md-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create high-signal, repository-grounded instructions with a host-neutral semantic core for coding-agent hosts that support AGENTS.md. Treat tool-specific instruction files as adapters when a host requires them.
findings and draft do not authorize instruction-file edits. Only apply authorizes those edits, limited to the requested files; validation side effects require separate authorization under the rule below.AGENTS.md. Create or revise a nested target only when the user names or approves that path and selects apply.CLAUDE.md without explicit authorization covering those files. Reuse authorization already granted for the same action. Report any validation artifacts that cannot be safely cleaned up.Do not skip repository inspection unless the user supplies the complete relevant context.
Choose each dimension independently:
create, revise, migrate, or auditfindings, draft, or applyAGENTS.md or one or more named nested pathsaudit + findings is the default for a review request. Pair audit + draft when the user also wants proposed replacement content. A migration can produce a read-only draft or applied changes. Use apply only when the user requests instruction-file edits; never turn findings or draft into those edits without new authorization.
If the user asks for "agent instructions", "repo instructions", or "coding-agent guidance", treat it as an AGENTS.md request only when the desired artifact is repository instruction scope rather than another document type.
Prefer targeted inspection over broad reading. Establish:
Read references/inspection-and-content-checklist.md when inspection is non-trivial, such as a migration, multiple manifests or instruction sources, risky validation, conflicting evidence, or a dirty target-file worktree.
For migrate, determine whether each source file is ordinary prose or an instruction entry point loaded by a target host. Keep a required entry point as a thin adapter when possible. Recommend replacing it with a pointer only when the host follows that pointer and the user confirms the change.
Resolve conflicts by claim type:
Record each material conflict and its resolution in the handoff.
Ask only about decisions that repository evidence cannot settle, such as:
Use a sensible default for low-impact ambiguity. Keep temporary authoring assumptions in the handoff, not the durable AGENTS.md; include an assumption in the file only when future agents need it to act correctly.
findings, return prioritized observations, evidence, and residual uncertainty without drafting or editing unless another output was also requested.draft, return proposed content and intended paths without editing the repository. It may accompany audit findings.apply, edit only the authorized targets. Use assets/agents-md-skeleton.md for a new root file and delete every inapplicable section or placeholder; write a new nested file as a local delta instead of copying the root skeleton.Prefer concrete commands, scoped boundaries, and decision rules over generic advice or product branding.
Do not claim universal AGENTS.md or nested-file support. Confirm the named host behavior when the result depends on it; if support is unknown, keep a single root file with clearly scoped subsections.
Recommend nested files only for materially different subtree rules. State the proposed directories, local deltas, root responsibilities, and known inheritance behavior before writing them.
Use references/nested-files-and-token-optimization.md when nested scope, host adapters, or a long draft requires closer judgment.
For each material command, path, or policy claim, record the exact repository source. Track execution separately as passed, failed, environment-blocked, or not run when execution evidence matters. Do not force a formal evidence taxonomy onto trivial or undisputed facts.
Then:
git ls-files as supplemental evidence when Git is available; do not assume intentionally untracked paths are invalidReport exact commands run, results, skipped checks, environment limitations, and remaining artifacts. Never imply that an unrun check passed.
Delete repeated or generic guidance, keep global rules in the root and local deltas in nested files, and link to maintained repository docs instead of copying bulky detail.
Always state the output paths, files changed or read-only status, and validation actually performed. When material, also report source conflicts, execution limitations or side effects, temporary assumptions, host-compatibility limits, and nested-file recommendations. Omit empty categories instead of producing a ceremonial checklist.
The result should help a coding agent act correctly on the first pass, preserve unrelated work, and contain no unsupported command, path, or policy claim. Its content should remain tool-neutral where possible without claiming support from hosts that were not identified or verified.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.