onboard-codebase — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited onboard-codebase (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate a comprehensive onboarding guide for a new developer joining the project, identifying key code, architecture, and people to talk to.
Omen CLI must be installed and available in PATH.
Run the outline command for a token-cheap overview of every file's structure:
omen -f json outline --compact --top 50This returns imports, classes with methods, and top-level functions — much cheaper than reading full source files.
Run the repomap analysis to find the most important code:
omen -f json repomap --compact --top 25PageRank-ranked symbols show what's central to the codebase.
Run the dependency graph analysis to understand structure:
omen -f json graphThis reveals how the codebase is organized and how modules relate.
Run the ownership analysis to find who knows what:
omen -f json ownershipThis shows who has expertise in each area of the code.
Run the complexity analysis to identify tricky areas:
omen -f json complexityNew developers should be warned about complex areas.
Generate an onboarding guide:
# Onboarding Guide: <Project Name>
## Quick Start
1. Clone the repo: `git clone ...`
2. Install dependencies: `...`
3. Run tests: `...`
4. Start dev server: `...`
## Architecture Overview
### Module Structuresrc/ ├── core/ # Core business logic ├── api/ # HTTP handlers ├── storage/ # Database layer └── utils/ # Shared utilities
### Key Dependencies
- `core/` depends on `storage/`
- `api/` depends on `core/`
- `utils/` is shared by all
## Important Code to Understand
### Core Symbols (by importance)
1. `core.Engine` - Main processing engine, heart of the system
2. `api.Router` - HTTP routing and middleware
3. `storage.Repository` - Database abstraction
4. ...
### Entry Points
- `cmd/server/main.go` - Main server entry point
- `cmd/worker/main.go` - Background job processor
## Subject Matter Experts
| Area | Expert | Notes |
|------|--------|-------|
| Core engine | [email protected] | Original author |
| API layer | [email protected] | Recent maintainer |
| Storage | [email protected] | Database specialist |
## Areas to Be Careful With
### High Complexity
- `core/processor.go` - Cognitive complexity: 45
- Talk to alice before modifying
- Has many edge cases
- `api/middleware.go` - Cyclomatic complexity: 28
- Authentication logic is tricky
- Well-tested but fragile
### Knowledge Silos
- `legacy/importer.go` - Only one contributor
- Documentation is sparse
- Ask alice for context
## First Tasks Suggestions
Good starter tasks to learn the codebase:
1. Add a new API endpoint (learn api/ patterns)
2. Write tests for an untested function (learn testing patterns)
3. Fix a documentation issue (explore while reading)
4. Address a simple TODO/FIXME (learn code style)
## Resources
- Design docs: `docs/design/`
- API docs: `docs/api/`
- Team wiki: <link>~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.