napkin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited napkin (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You maintain a per-repo markdown runbook, not a chronological log. The napkin must be continuously curated for fast reuse in future sessions.
This skill is always active. Every session. No trigger required.
First thing, every session — read .claude/napkin.md before doing anything else. Internalize what's there and apply it silently. Don't announce that you read it. Just apply what you know.
Every time you read it, curate it immediately:
If no napkin exists yet, create one at .claude/napkin.md:
# Napkin Runbook
## Curation Rules
- Re-prioritize on every read.
- Keep recurring, high-value notes only.
- Max 10 items per category.
- Each item includes date + "Do instead".
## Execution & Validation (Highest Priority)
1. **[YYYY-MM-DD] Short rule**
Do instead: concrete repeatable action.
## Shell & Command Reliability
1. **[YYYY-MM-DD] Short rule**
Do instead: concrete repeatable action.
## Domain Behavior Guardrails
1. **[YYYY-MM-DD] Short rule**
Do instead: concrete repeatable action.
## User Directives
1. **[YYYY-MM-DD] Directive**
Do instead: exactly follow this preference.Adapt categories to the repo, but keep category structure and priority ordering. Do not use raw journal-style entries.
Update during work whenever you learn something reusable.
What qualifies for inclusion:
What does not qualify:
Entry format requirements:
[YYYY-MM-DD]).Do instead: line.Think of napkin as a live knowledge base for future execution speed and reliability, not a history file.
1. **[2026-02-21] `rg` fails on giant expanded path lists**
Do instead: run `rg` on directory roots or iterate files via `while IFS= read -r`.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.