Is project-detect safe to install?

SaferSkills independently audited project-detect (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/project-detect/SKILL.md · 1 file

skills/project-detect/SKILL.md1.6 KB · Markdown

name: project-detect

description: Projeye girdiginde tech stack'i tespit et, uygun skill ve agent'lari aktive et. Kullanim: /project-detect

/project-detect - Otomatik Proje Tespiti

Mevcut dizindeki dosyalari tarayarak projenin tech stack'ini tespit et.

Adim 1: Dosya Tarama

Su dosyalari kontrol et (paralel):

package.json (name, dependencies, scripts)
tsconfig.json
pyproject.toml / requirements.txt / setup.py
go.mod
Cargo.toml
pom.xml / build.gradle
manage.py
docker-compose.yml / Dockerfile
.github/workflows/
CLAUDE.md (mevcut proje hafizasi)
.env.example

Adim 2: Stack Raporu

PROJE TESPITI
=============
Proje: <dizin adi>
Dil: TypeScript / Python / Go / Java / Rust
Framework: Next.js / Django / Spring Boot / Gin / ...
Database: PostgreSQL / MongoDB / SQLite / ...
ORM: Prisma / SQLAlchemy / GORM / JPA / ...
Test: Jest / pytest / go test / JUnit / ...
CI/CD: GitHub Actions / GitLab CI / ...
Container: Docker / Docker Compose / K8s / ...
Monorepo: Evet/Hayir (turborepo, nx, lerna)

Aktif Skill'ler:
  - <skill-1>
  - <skill-2>
  - ...

Aktif Workflow:
  feature: @architect -> @kraken -> @tdd-guide -> @code-reviewer -> @verifier
  bugfix: @sleuth -> @spark -> @verifier
  refactor: @phoenix -> @kraken -> @verifier

Adim 3: CLAUDE.md Kontrol

Dizinde CLAUDE.md var mi?
Yoksa: "CLAUDE.md olusturayim mi? (template: ~/.claude/templates/CLAUDE-TEMPLATE.md)"
Varsa: Oku, proje bilgilerini kontrol et, eksikleri tamamla

Adim 4: Oneriler

Projeye ozel oneriler sun:

Eksik test varsa belirt
Security riski varsa uyar
Performans iyilestirme firsati varsa soyple
Kullanilmayan dependency varsa belirt

project-detect— agent skill

Is project-detect safe to install?

/project-detect - Otomatik Proje Tespiti

Adim 1: Dosya Tarama

Adim 2: Stack Raporu

Adim 3: CLAUDE.md Kontrol

Adim 4: Oneriler

Audit the pieces. Scan the whole. Decide.