init-profile — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited init-profile (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Copies one of the curated presets in profiles/ into the user's ~/.neurodock/profile.yaml, with safeguards against overwriting an existing profile and a follow-up validate-profile invocation.
Available presets (see profiles/README.md):
profiles/adhd.yamlprofiles/audhd.yamlprofiles/burnout-recovery.yamlprofiles/dyslexic.yamlprofiles/dyspraxia.yamlprofiles/educator-semester.yamlprofiles/low-stimulation.yamlprofiles/ocd.yamlprofiles/student-university.yamlprofiles/profile.minimal.yaml (no neurotype-specific defaults)Design rationale: docs/decisions/0004-profile-schema-design.md — every preset embodies "lived-experience-led defaults" rather than starting from an empty file.
adhd to audhd after adiagnostic update).
NEURODOCK_PROFILE env var, else~/.neurodock/profile.yaml.
--force is passed. With --force, copies the prior file to ~/.neurodock/profile.yaml.bak.<timestamp> first.
profile validate againstthe new file as a self-check.
used.
pnpm --filter @neurodock/cli run --silent dev profile init --preset adhdForce overwrite (with backup):
pnpm --filter @neurodock/cli run --silent dev profile init --preset audhd --forceCustom destination:
pnpm --filter @neurodock/cli run --silent dev profile init --preset ocd --path ./my-profile.yamlpreset: profiles/adhd.yaml
target: ~/.neurodock/profile.yaml
backup: ~/.neurodock/profile.yaml.bak.20260523T091422 (only with --force)
validate: okExit 0 on success, 1 if the target exists and --force was not passed, 2 if validation failed against the freshly copied preset (treat as a bug in the preset itself).
profile init subcommand is not yet present inpackages/cli/src/commands/profile.ts at time of writing. Until it lands, manually copy with cp profiles/<preset>.yaml ~/.neurodock/profile.yaml and then run the validate-profile skill. Track this as a CLI gap.
not update the user's profile.
--preset explicitly.Treat the install as a quiet operation. A noisy welcome banner is the opposite of what an ND user needs at minute zero with a new tool. One line in, one line out.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.