agents-md-generator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agents-md-generator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Produces a concise, integrator-focused AGENTS.md for repos that demonstrate one concept across multiple language implementations.
php/, java/, dotnet/)Answer: What is the single thing this repo teaches? Distill to one sentence: "[verb] [what] using [how]".
Look for:
Verify vs Charge)For each pattern, capture the why — especially if getting it wrong has a real cost (penalty, security issue, data loss). This is the highest-value content in the file.
For each language, identify:
Note specific line ranges for the most important methods (SDK config, core pattern implementation).
List all REST endpoints with method, path, and one-line purpose. All languages should expose identical endpoints — confirm this or note divergence.
.env.sample, appsettings.json, etc.)If implementations make direct HTTP calls to an external API (rather than using an SDK), capture the request shape:
Include this as a "## API Request Shape" section only if the request structure is non-obvious and getting it wrong would cause silent failures or hard-to-debug errors. Skip it for SDK-based repos where the library handles the wire format.
Two or three bullet flows max:
For demo repos: note what is NOT production-ready and why (no auth, no encryption, simplified storage, etc.).
Use this structure, targeting 80–120 lines:
~~~markdown
[One-sentence summary: verb + what + how + languages]
[2–4 numbered items. Each: bold rule, then plain-language explanation of the WHY. Tone: informational, written for someone integrating this — not a maintainer warning.]
path/to/File.ext — [role, line refs for key methods if useful]...
[Repeat per language]
| Method | Path | Purpose |
|---|
...
VAR_NAME=value # explanation| [Column] | [Column] | [Column] | ...
field.name — [what it is, why the value is non-obvious]...
[Flow name]: [step → step → step] [Flow name]: [step → step → step]
[1–3 sentences on what demo code omits for production.]
package-name vX.Y+... ~~~
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.