cli-just — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cli-just (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create readable task automation that matches the repository's installed Just version and existing justfile conventions.
just --version, the existing justfile/module tree, and just --list before editing. Installed capabilitiesand existing syntax are authoritative over this skill's examples.
just --fmt. Use just --fmt --check only when therepository explicitly treats the built-in formatter as authoritative. just --dump is inspection output, not a formatting source.
every non-final item. Do not combine them into one long string. Triple-quoted strings are for values whose newlines are semantic, not visual wrapping. For example:
check-steps := (
"event-class-coverage " +
"orphan-disposal " +
"price-coverage"
)overrides that style.
condition.
just --help, just --man, or <https://just.systems/man/en/>) for version-sensitivesyntax. Read only the task-specific reference:
| Task | Reference |
|---|---|
| Recipes, parameters, dependencies, cache, executable checks, echo rules | references/recipes.md |
| Settings, dotenv, lists, modules | references/settings.md |
| Expressions, functions, constants | references/syntax.md |
| Shell or script recipes, macOS Bash constraints | references/inline-scripts.md |
| Check/write, status, aliases, organization | references/patterns.md |
and the installed version supports them.
just --list or just --summary. Then execute the narrowest safe recipe path. Forstate-changing recipes, use an existing dry-run/check mode or inspect the expanded command first.
For a new standalone file, prefer dependency declarations, constants, public recipes, checks, then private helpers. Use set default-list := true when no single default action makes sense and the installed version supports it. Example starting points are in examples/standalone.just and examples/devkit.just. Load one only when creating that shape.
Completion requires a parsable justfile, the requested recipe behavior, and execution or dry-run evidence appropriate to its side effects. Finish with ### ✅ Just workflow ready, a compact recipe/alias/purpose table when several entries changed, and ### 🧪 Verification with exact commands and outcomes. Keep confirmation prompts, recipe data output, compiler output, and just --list output undecorated. Preserve the repository's own banner vocabulary.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.