clifier — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited clifier (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Generate a reusable website-automation package, not a one-off script. Default to a Deno CLI plus a runtime-neutral client library. Keep the result concise, polished, and JSR-ready.
Bias toward small, sharp, readable software: production-ready, highly usable, and free of wasted motion.
Use references progressively. Read only what the current step needs:
references/cli-command-patterns.md
references/investigation-workflow.md
references/fetch-vs-playwright.md
references/auth-and-session.md
playwright-cli.fetch.fetch, hybrid, or playwright-cli-backed browser automation.assets/templates/deno-cli/.Read references/cli-command-patterns.md before naming commands.
login.@cliffy/command for Deno CLIs.Deno-specific filesystem or session work.
-v, --version flag.vocabulary.
--help.memorable, such as --session-path/-s and --out/-o.
agent-facing snippets, such as tool-name --json --session-path ~/.auth/[email protected] jobs get <job-id>. Keep command-specific flags near the command they configure, such as tool-name --json jobs download <job-id> --out ./downloads.
follow-up commands.
doctor, login, orother template-era commands unless the real tool needs them.
Read references/investigation-workflow.md before implementing.
playwright-cli for discovery and for unavoidable browser automation. Donot build the generated package around the vanilla Playwright runtime.
controls that matter.
headers when needed.
reused by the generated tool.
Read references/fetch-vs-playwright.md before deciding.
fetch.playwright-cli is needed for login or bootstrap and thesaved state can be translated into the exact runtime cookies, headers, tokens, CSRF values, or other inputs that fetch needs.
playwright-cli-backed browser automation only after a serious failedattempt to make fetch or hybrid work.
chosen runtime is the simplest robust option.
fetch request before calling a hybriddesign production-ready.
Read references/auth-and-session.md when auth is required.
~/.auth/<project_namespace>@<project_repo>.json, resolving ~ through the OS home directory. For a JSR name such as @acme/my-tool, use ~/.auth/[email protected].
--session-path, -s <path> as the explicit override on login and laterauthenticated commands.
auth noungroup and validate any automatic cookie discovery against the target site.
fetch; prove howruntime auth is constructed.
--json output, and repo files.Start from assets/templates/deno-cli/.
./cli.mod.ts as the public library root and cli.ts as the Deno CLIentrypoint.
lib/.deno compile tasks for all supported Deno targets.bin/.compile the aggregate task that builds every supported target, and addone task per target for direct use.
deno.json.version and comparing itto the previous git ref used by the release workflow.
deno.json.version,uses the Deno version helper task(s), compiles all targets, creates a GitHub Release with the binaries, and publishes to JSR.
name, version, exports, and deno publish --dry-run validation.deno.json as the single source of truth for package and CLI versionmetadata. Do not duplicate the version string in cli.ts.
serves the template.
instructions when a command needs them.
from the final generated package.
Read references/output-and-docs.md while polishing the result.
affordances.
README.md and a root COMMANDS.md.COMMANDS.md a cheat sheet: short, scan-friendly, and centered oncopy-pasteable CLI invocations rather than prose.
playwright-cli, browser binaries, or othernon-bundled runtime dependencies, validate the missing-dependency path too.
--help, deno task check, the happy path, anddeno publish --dry-run.
wrappers.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.