reference-app — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited reference-app (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Point Claude at another fully-developed application the user wants to use as a reference. Build a structured understanding of it. Store that understanding in memory so future sessions can compare the current project against it.
Step 0: Confirm intent.
Before reading anything, ask:
These three answers shape the depth and tone of the resulting memory. Don't skip them.
Step 1: Validate the path.
Step 2: High-level scan (light pass).
Read in this order, one file each, no deep dives yet:
CLAUDE.md if it exists.Step 3: Architecture map.
Step 4: Convention mining.
Read 5–10 representative files (one component, one route, one test, one util, one type definition, one style file). Extract:
Step 5: Distinctive choices.
What did this project do that's different from defaults? These are the high-information signals — they reveal taste and constraints.
Step 6: Write the memory.
Create .claude/memory/reference/<reference-app-name>.md with the schema:
---
name: ref-<app-name>
type: reference
description: <one-line, e.g., "Reference app: AcmeShop — Next.js + Drizzle + Postgres SaaS, used as architecture model">
created: <YYYY-MM-DD>
last-verified: <YYYY-MM-DD>
source-path: <path>
authority-level: authoritative | suggestive | inspirational
---
# Reference: <app-name>
> Authority: <as set by user in step 0>. Cite when applying.
## Stack
- Language(s):
- Frameworks:
- Database:
- Auth:
- Deployment:
- Testing:
## Architecture (one paragraph + a small Mermaid diagram if it helps)
## Key conventions
- File organization:
- Naming:
- API style:
- State management:
- Error handling:
- Styling:
- Tests:
## Distinctive choices
- Choice 1: what they did, what it cost, what it bought.
- Choice 2: …
## Useful prior art for the current project
(populated when comparing to current — left blank initially)
## What NOT to copy
(blank initially; filled in when patterns are noted to be tied to the source's specific constraints)Add an entry to .claude/memory/MEMORY.md under the Reference section.
Step 7: Confirm with the user.
Show the resulting memory. Ask:
The memory is now in context. Use it like this:
acmeshop (your reference) you used a feature-folder layout — same here?"## Reference: <app-name>
- Path: <path>
- Authority: <suggestive | authoritative>
- Memory written: .claude/memory/reference/<app-name>.md
## Quick summary
- Stack: <one line>
- Architecture shape: <one line>
- 3 most distinctive choices:
1. …
2. …
3. …
## Ready to use
You can now ask things like:
- "Compare the auth in the current project to <ref>."
- "How does <ref> handle billing? Set up the same here."
- "Where does <ref> put feature flags? Should we follow that?"
- "Review my current code against <ref>'s conventions."~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.