mapping-codebases — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mapping-codebases (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use tree-sitting instead.
This skill wrote _MAP.md files to disk — a persisted symbol inventory per directory, generated once and read many times. That tradeoff made sense when scanning was expensive. It isn't: tree-sitting parses a 250-file repo in about 700ms and answers queries against the in-memory AST in under a millisecond.
A persisted map costs what a runtime scan does not — it goes stale, it needs regenerating, it gets committed, and it must be excluded from every other tool that walks the tree. Nothing was gained for that.
TREESIT=/mnt/skills/user/tree-sitting/scripts/treesit.py
# Was: codemap.py /path/to/repo → root orientation
python3 $TREESIT /path/to/repo
# Was: reading every _MAP.md in the tree → full inventory
python3 $TREESIT /path/to/repo --depth=-1 --detail=sparse
# Was: grepping _MAP.md for a symbol → direct lookup
python3 $TREESIT /path/to/repo --no-tree 'find:parse_input'The last working release is mapping-codebases-v0.8.0 (2026-03-31). It carries scripts/codemap.py and the eleven bundled parsers/*.so grammars. The release is the snapshot; nothing in this directory reproduces it.
Note that v0.8.0 ships a latent bug: codemap.py:1216 calls an unimported get_parser() inside a try swallowed by a bare except Exception, so HTML inline-JavaScript symbol extraction silently returned nothing. It will not be fixed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.