docs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited docs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Local, in-session documentation updater. Replaces the remote /docs command so you do not need the Claude GitHub app or a cloud session. No PR is opened. Changes are left staged in the working tree for the user to review and commit.
Read the user's request literally before touching anything.
README.md and relevant docs/*.md. Prefer delegating the mechanical work to the doc-sync skill if it is available in this session.docs/ only if the user explicitly asked for a new file.Never document from memory. Every factual claim you write (file path, function name, flag, command, version, behavior) must trace to something you just read or ran.
Required reads before writing:
AGENTS.md and CLAUDE.md at the repo root: source of truth for conventions, style, and project rules.index.ts, services.ts, and commands/ to see the real public surface.--help to capture real flags and argument order. Do not invent flags.package.json and git log --oneline -20 for recent commits.If you cannot verify a claim right now, mark it (unverified) inline or delete it. Do not ship an unverified specific.
[!], [ok], -->, [x]. No emoji. No em-dashes. Project rule from CLAUDE.md.After each file edit:
--help and confirm the flags.Glob or Read.Leave changes staged in the working tree. The user reviews and commits.
If the user explicitly asks for a commit, use Conventional Commits: docs(scope): short summary. Do not mix doc changes with unrelated behavior changes in one commit.
.maestro/memory/**, .maestro/tasks/**, or .maestro/missions/**.~/.claude/projects/**/memory/**.Read, Grep, Glob, git log, --help) are always fine. Any mutation outside doc files requires explicit user authorization.End with a brief report, at most 6 bullets:
(unverified) and why you could not verify it.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.