env-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited env-sync (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Checks whether skill scripts have drifted from the current environment. The drift-check script handles all detection deterministically. Your job is to interpret the gaps and propose the exact edits needed.
~/.claude/commands/env-sync/scripts/check-drift.shWork through each section:
Compare "hardcoded in collect-wsl.sh" vs "actual AI-looking dirs in home".
for d in ... loop in collect-wsl.shFor each gap, show the exact line to add or remove in collect-wsl.sh.
Compare actual dirs in ~/dev vs what wsl-audit's SKILL.md synthesis instructions reference.
Show exact edits to wsl-audit/SKILL.md.
Compare current VPS containers (short names) vs the groupings defined in vps-audit SKILL.md.
Show exact edits to vps-audit/SKILL.md.
Any BROKEN: line means a SKILL.md references a script path that doesn't exist.
For each broken path:
scripts/ dirs for a file with the right name)This is high-priority - a broken script path causes silent failure with no error message to the user.
Directories in ~/dev that have no recognized sentinel file (package.json, Cargo.toml, etc.).
These won't appear in the PROJECT_LANGS output. For each:
collect-wsl.shFor any script edited, run a quick smoke-test to confirm no syntax errors:
bash -n ~/.claude/commands/wsl-audit/scripts/collect-wsl.sh && echo "syntax OK"
bash -n ~/.claude/commands/vps-audit/scripts/collect-vps.sh && echo "syntax OK"
bash -n ~/.claude/commands/env-sync/scripts/check-drift.sh && echo "syntax OK"Report a summary of what was updated and what (if anything) still needs manual attention.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.