Wrap Skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Wrap Skill (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Claude Code plugin (also installable manually in Codex / OpenCode / etc.) that consolidates every scattered descriptive markdown file in a project (README.md, AGENTS.md, HANDOFF.md, docs/*) into a single canonical CLAUDE.md and reconciles it against the current code.
After one run, the next session — yours, a teammate's, or a fresh agent's — has exactly one entry point.
Working with AI coding agents tends to produce documentation sprawl: a HANDOFF.md from one session, an AGENTS.md from another, a half-stale README.md, a docs/ folder with three-week-old design notes. Each session's "context dump" creates a new file, and over time the project loses its single source of truth.
wrap does the opposite. Each invocation:
.md in the projectCLAUDE.md with a fixed structurePROGRESS block at the top answering: where are we now, what's the next concrete actionThis repo is a Claude Code plugin marketplace. From inside Claude Code:
/plugin marketplace add recomby-ai/wrap-skill
/plugin install wrap@wrap-skillThat's it — no git clone, no manual file copying. To update later, run /plugin marketplace update wrap-skill.
<details> <summary>Manual install (other agents / no plugin support)</summary>
If you're using an agent that supports SKILL.md but not Claude Code's plugin system, copy the file manually:
mkdir -p ~/.claude/skills/wrap && curl -fsSL https://raw.githubusercontent.com/recomby-ai/wrap-skill/main/plugins/wrap/skills/wrap/SKILL.md -o ~/.claude/skills/wrap/SKILL.mdAdjust the destination path for Codex / OpenCode / Cursor / Gemini CLI as needed. </details>
Just say one of these in any project:
wrap / wrap up / /wraptidy docs / sync docs / update docs / archivethis phase is done收尾 / 同步文档 / 整理文档 / 整理一下 / 更新文档 / 存档 / 梳理一下 / 这阶段做完了The agent will:
.md and cross-check it against the real codeCLAUDE.md with PROGRESS / Architecture / Run / API / Known Limits / Handoff sectionsCLAUDE.md follows a fixed skeleton:
# <project>
<one-line summary>
## PROGRESS
**Current**: ...
**Next**: ...
**Known outstanding**: ...
## Architecture
## Run
## API / Interfaces (skipped if project has no external interfaces)
## Known Limits
## HandoffSoft cap of 250 lines. If a project genuinely needs more (multi-service runbooks, large credential tables), the skill applies for a documented exemption rather than padding or hand-waving.
CLAUDE.md.CLAUDE.md conflicts with the code, the code wins — always.Tested with Claude Code. Should work in any agent that supports the SKILL.md format (Codex, OpenCode, Cursor, Gemini CLI, etc.).
The skill only touches files inside the project directory. It does not interact with any agent's memory system — those are decoupled by design.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.