skill-map — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-map (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Find skill installs and references across local files without scanning macOS protected home paths or obvious transcript, cache, dependency, and backup noise.
--root PATH: Scan this root. Repeatable. Default: $HOME.--skill NAME: Restrict the report to one skill name. Repeatable.--format text|json|dot: Select report format. Default: text.--include-catalog-sources: Include known local source checkouts such as ~/projects/agent-skills, ~/sablier/sablier-skills, and ~/sablier/agent-skills during broad scans. Explicit --root values inside those trees are always scanned.--include-self: Include self-references in dependency output.--include-snippets: Include matched line text. Default output omits snippets to avoid leaking transcript or secret-adjacent content.--show-skipped: Include ignored path summaries in text or JSON output. uv run scripts/skill-map.py "$ARGUMENTS" uv run scripts/skill-map.py--format json when another command or agent will consume the result.--format dot when the user asks for a graph, Graphviz input, or dependency visualization.--include-snippets only when the user asks to see exact matching lines.dependency: a skill file or support file references another discovered skill.external-reference: a non-skill file references a discovered skill.duplicate-install: multiple discovered SKILL.md files declare or resolve to the same skill name.unresolved-like-reference: explicit $kebab-name or /kebab-name tokens that do not match a discovered skill.$HOME scans into macOS protected paths such as ~/Library or ~/.Trash; pass narrower explicit roots instead when a broad scan needs more coverage.--root when auditing catalog contents.--include-snippets was intentionally used.references/ignore-policy.md instead of ad hoc shell filters.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.