agents-md — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agents-md (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create or improve agent instructions that help a coding agent change the repository correctly without rediscovering its workflow. Base every repository-specific command, path, and rule on evidence in the current checkout.
Prefer a focused diff over a wholesale rewrite. There is no universal line limit, required section list, symlink layout, or commit-attribution policy; follow the repository's own needs and maintainer intent.
AGENTS.md.unsupported claims.
AGENTS.md with CLAUDE.md,.github/copilot-instructions.md, or other repository instruction files.
Use @agents-generator instead when the task specifically calls for its packaged generation modes, assets, or backup workflow. Use this skill when a maintainer-readable, evidence-first edit is the primary goal.
Before writing, read every instruction file that applies to the target path, including existing AGENTS.md files and relevant tool-specific files such as CLAUDE.md, GEMINI.md, .github/copilot-instructions.md, and .github/instructions/*.instructions.md.
AGENTS.md in place when possible.user requests it and repository evidence shows identical content is desired.
higher-priority applicable rule, or ask when the intended policy cannot be established from the repository.
Inspect only enough of the repository to establish how work is actually done:
README*,CONTRIBUTING*, and relevant docs.
to identify supported tools and exact commands.
deployment job is safe or appropriate to run locally.
conventions.
secrets boundaries, and production-only operations.
Prefer rg --files and rg for discovery when available. Track the source of each non-obvious command or rule so unsupported claims do not enter the final file.
Use the root AGENTS.md for repository-wide guidance. Add or revise a nested AGENTS.md only when a subtree has materially different commands, architecture, conventions, or safety boundaries.
Keep shared rules at the root and only differences in nested files. For tools that implement the public AGENTS.md convention, apply root/ancestor guidance and narrower subtree instructions according to the target host's precedence. The nearest file does not silently erase unrelated ancestor rules. Do not copy the full root file into every package.
Choose headings that fit the repository instead of forcing a fixed template. Include the following only when supported by evidence:
and test commands, with the working directory when it is not obvious.
required before handoff.
dependencies, and cross-package coordination.
deployments, and operations that require explicit authorization.
pull-request requirements that affect implementation or handoff.
Write direct, testable statements. Prefer:
- From the repository root, run `npm test -- path/to/file.test.ts` for a focused test.over:
- Make sure tests pass and follow best practices.Link to maintained documentation instead of copying it. Distinguish required checks from optional, slow, privileged, or deployment-only checks.
AGENTS.md completely.checks when useful.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.