document — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited document (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are in AUTONOMOUS MODE. Do NOT ask questions. Analyze the project's documentation landscape and produce a comprehensive health report.
INPUT: $ARGUMENTS
If no arguments provided, perform a full documentation audit of the current project. If a specific doc type is mentioned (e.g., "api", "adr", "runbook"), focus the audit on that area and route to the appropriate sub-skill.
============================================================ PHASE 1: AUTO-DETECT PROJECT CONTEXT ============================================================
Detect the project's tech stack and maturity level:
Step 1.1 -- Tech Stack Detection
Scan for config files to determine the stack:
Step 1.2 -- Maturity Assessment
Classify the project into a maturity tier:
| Tier | Criteria |
|---|---|
| Greenfield | < 20 commits, no tests, no CI |
| Active Development | 20-200 commits, some tests, basic CI |
| Mature | 200+ commits, test suite, CI/CD, deployments |
| Production | All of Mature + monitoring, runbooks, on-call |
Record the tier -- it determines which docs are expected.
============================================================ PHASE 2: DOCUMENTATION INVENTORY ============================================================
Scan the project for existing documentation artifacts:
Step 2.1 -- Core Docs
Check for each of these files/directories and record status (present/missing/stale):
| Document | Paths to Check |
|---|---|
| README | README.md, README, readme.md |
| Changelog | CHANGELOG.md, CHANGES.md, HISTORY.md |
| Contributing | CONTRIBUTING.md, docs/contributing.md |
| License | LICENSE, LICENSE.md, COPYING |
| Code of Conduct | CODE_OF_CONDUCT.md |
Step 2.2 -- API Documentation
Check for:
Step 2.3 -- Architecture Docs
Check for:
Step 2.4 -- Operations Docs
Check for:
Step 2.5 -- Onboarding Docs
Check for:
============================================================ PHASE 3: GAP ANALYSIS ============================================================
Score each documentation area based on project maturity tier:
SCORING MATRIX:
| Document Type | Greenfield | Active Dev | Mature | Production |
|---|---|---|---|---|
| README | Required | Required | Required | Required |
| Changelog | Optional | Recommended | Required | Required |
| API Docs | Optional | Recommended | Required | Required |
| ADRs | Optional | Optional | Recommended | Required |
| Runbook | N/A | Optional | Recommended | Required |
| Onboarding | Optional | Recommended | Required | Required |
| Diagrams | Optional | Optional | Recommended | Required |
| License | Required | Required | Required | Required |
For each doc type, assign a status:
Calculate coverage score: (PASS count / Required+Recommended count) * 100
============================================================ PHASE 4: ROUTE TO SUB-SKILLS ============================================================
Based on identified gaps, recommend specific sub-skills to run:
| Gap | Sub-Skill | Command |
|---|---|---|
| Missing/stale README | /readme | Generate comprehensive README |
| Missing API docs | /api-docs | Auto-generate OpenAPI spec |
| Missing changelog | /changelog | Generate from git history |
| Missing ADRs | /adr | Create ADR directory + retrospective ADRs |
| Missing runbook | /runbook | Generate operations runbook |
| Missing onboarding | /onboarding | Generate developer onboarding guide |
| Missing diagrams | /diagram | Generate architecture diagrams |
If $ARGUMENTS specifies a particular doc type, execute that sub-skill's work inline rather than just recommending it.
============================================================ PHASE 5: DOCUMENTATION HEALTH REPORT ============================================================
OUTPUT:
| Document | Status | Path | Last Updated | Notes |
|---|---|---|---|---|
| README | PASS/STALE/MISSING | path or -- | date or -- | details |
| Changelog | ... | ... | ... | ... |
| API Docs | ... | ... | ... | ... |
| ADRs | ... | ... | ... | ... |
| Runbook | ... | ... | ... | ... |
| Onboarding | ... | ... | ... | ... |
| Diagrams | ... | ... | ... | ... |
| License | ... | ... | ... | ... |
Ordered list of documentation gaps to address, highest priority first:
Run: /[sub-skill]
============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing documentation, validate completeness:
IF VALIDATION FAILS:
============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /document — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
============================================================ DO NOT ============================================================
Only audit and report. Sub-skills handle the actual generation.
(e.g., runbooks for a CLI tool with no deployment).
NEXT STEPS:
After reviewing the health report:
/api-docs to generate OpenAPI documentation for your API."/changelog to generate a changelog from git history."/adr retrospective to create ADRs from existing codebase decisions."/runbook to generate an operations runbook."/onboarding to generate a developer onboarding guide."/diagram to generate architecture diagrams."~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.