learn — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited learn (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Reads your existing skills from phucbm/skills README, scans the current codebase, diffs the two, and presents a ranked list of save/update candidates with recommended file paths. You pick which ones to act on.
gh repo clone phucbm/skills /tmp/phucbm-skills 2>/dev/null || git -C /tmp/phucbm-skills pullRead /tmp/phucbm-skills/README.md only. Extract:
Read these in parallel:
package.json / composer.json / pyproject.toml / Cargo.toml / go.mod — deps and scriptsnext.config.*, vite.config.*, drizzle.config.*, biome.jsonc, playwright.config.*, tailwind.config.*.github/workflows/*.yml — CI/CD patternsscripts/ directory — custom toolinglib/, src/, app/ top-level only (don't recurse deep — read index/entry files).claude/CLAUDE.md and .claude/docs/ if present — already-documented patternsExtract topics: libraries used, non-obvious configurations, custom patterns, architectural decisions, CI/CD tricks.
Cross-reference found topics against existing README knowledge and skills tables.
Produce two lists with recommended file paths for every item:
NEW — topics found in codebase with no match in existing knowledge/skills:
[N] Topic name — one-line reason it's worth saving
skill: skills/<topic>/SKILL.md
knowledge: knowledge/<category>/<slug>.mdIf multiple new topics share knowledge (e.g. rag + pinecone), show the relationship:
[N] RAG pipeline — generic chunk→embed→query pattern, reusable with any vector DB
skill: skills/rag/SKILL.md
knowledge: knowledge/rag/concepts.md
[N+1] Pinecone — vector DB setup, upsert, query, metadata filters
skill: skills/pinecone/SKILL.md
knowledge: knowledge/pinecone/setup.md
note: skills/rag will also reference knowledge/pinecone/setup.mdUPDATE — topics that overlap an existing entry but the codebase shows something new:
[N] update: <existing-topic> — what's new or different
file: knowledge/<category>/<slug>.mdRank by: reusability across projects × non-obviousness (things you'd have to figure out again from scratch).
Skip topics that are: trivial to look up, fully covered already, or project-specific with no transfer value.
Present the full list and ask: "Which ones to save? (e.g. 1, 3, update 4 — or 'all')"
Wait for response. Then for each selected item:
add-skill flow: draft skills/<topic>/SKILL.md + knowledge/<category>/<slug>.md, show both, confirm, pushupdate-skill flow: show diff of proposed changes to existing knowledge file, confirm, pushEach item is confirmed individually. Never batch-push without showing what will change.
After all pushes: confirm final state and remind user to run /plugin marketplace update phucbm in other projects to get the new skills.
skills/<topic>/SKILL.md — one level only, no bucket subdirectoriesknowledge/<category>/<slug>.md — flag when shared across skills~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.