generate-readme — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited generate-readme (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Invoke this skill when the user says:
TASKS.md or PLAN.md exists in the same folder, read it for context on intent and scope.While reading the code, collect the following details:
| Category | What to look for |
|---|---|
| Purpose | What problem does this solve? What is the main feature/module? |
| Inputs / Outputs | CLI args, function params, API endpoints, events consumed/produced |
| Configuration | Environment variables, config files, feature flags |
| Dependencies | External packages, services, or APIs relied upon |
| Usage examples | Invocation patterns, code snippets, sample commands |
| Folder structure | Notable sub-folders and their roles |
| Setup / Installation | Build steps, install commands, prerequisites |
| Limitations / Notes | Known edge cases, TODOs, constraints |
Before writing, ask the user about anything that cannot be reliably inferred from the code:
If all details are clear from the code and context, state: "The implementation is clear — no questions. Proceeding to generate README."
Wait for the user's answers before writing the file.
Create (or overwrite) README.md in the same folder as the target implementation, using the structure below. Omit any section where the information genuinely does not apply.
# <Project / Feature Name>
> <One-line description of what this does and why it exists.>
## Table of Contents
- [Overview](#overview)
- [Features](#features)
- [Prerequisites](#prerequisites)
- [Installation](#installation)
- [Usage](#usage)
- [Configuration](#configuration)
- [Folder Structure](#folder-structure)
- [API / Interface Reference](#api--interface-reference)
- [Examples](#examples)
- [Contributing](#contributing)
- [License](#license)
---
## Overview
<2-4 sentences explaining the problem this solves and the approach taken.>
## Features
- <Feature 1>
- <Feature 2>
- ...
## Prerequisites
- <Runtime / tool with minimum version>
- <Any required service or credential>
## Installation
npm install
## Usage
<Short explanation of the happy-path workflow.>
## Configuration
| Variable / Key | Default | Description |
|----------------|---------|-------------|
| `ENV_VAR_NAME` | `value` | What it controls |
## Folder Structure
<root>/ ├── src/ # Source files ├── tests/ # Test suites └── ...
## API / Interface Reference
### `functionOrEndpointName(param: Type): ReturnType`
<Description, param table, return value, example call.>
## Examples
// Concrete usage example
## Contributing
<How to run tests, lint, and submit changes.>
## License
<License name and link, or "Internal use only.">README.md and verify:<Your text here>) remains unfilled.<!-- TODO: ... --> comment with a clear note.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.