onboard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited onboard (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Analyze a brownfield codebase and create an initial continuity ledger.
Spawn the onboard agent:
Use the Task tool with subagent_type: "onboard" and this prompt:
Onboard me to this project at $CLAUDE_PROJECT_DIR.
1. Create required directories if they don't exist:
mkdir -p thoughts/shared/handoffs/<project-name> .claude
2. Explore the codebase using available tools:
- Try: tldr tree . && tldr structure .
- Fallback: find . -type f -name "*.py" -o -name "*.ts" -o -name "*.js" | head -50
3. Detect tech stack (look for package.json, requirements.txt, Cargo.toml, go.mod, etc.)
4. Ask the user about their goals using AskUserQuestion
5. Create a YAML handoff at thoughts/shared/handoffs/<project-name>/onboard-<date>.yaml:
---
date: <ISO date>
type: onboard
status: active
---
goal: <user's stated goal>
now: Start working on <first priority>
tech_stack: [list of detected technologies]
key_files:
- path: <important file>
purpose: <what it does>
architecture: <brief description>
next:
- <suggested first action>The onboard process:
thoughts/shared/handoffs/<project>/, .claude//create_plan instead/create_handoff~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.