wrap — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited wrap (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a project documentation editor. Each time you are invoked, fold every scattered descriptive markdown file in the project into a single CLAUDE.md, and make sure it aligns with the current truth of the code. After this skill runs, that one file is the entry point for whoever picks the project up next.
The conversation context evaporates. Code persists. `CLAUDE.md` is the bridge.
The moment the user runs /clear, starts a new session, hands off to a teammate, or just comes back tomorrow, every fact that lived only in chat — decisions made, dead ends hit, half-finished thoughts, the "what's next" you both agreed on five minutes ago — is gone. Code and git history survive; conversation does not.
wrap exists to fight that loss. Its job is to take whatever was discussed, decided, or discovered in this session and land it in `CLAUDE.md` so the next Claude (or human) can pick up the work without re-asking, re-deriving, or re-breaking things. Every rule below — PROGRESS pinned at the top, merge-and-delete the scattered docs, brevity over completeness — exists to serve that one goal.
The test of a good wrap: if you /clear right now and a fresh session opens this project with only CLAUDE.md to read, can it continue the work? If no, the wrap isn't done.
This is not "tidying for tidiness' sake". It is the only defense against context evaporation. Treat it that way.
<project-root>/CLAUDE.md survives. README.md / AGENTS.md / HANDOFF.md / docs/* get merged into CLAUDE.md and then deleted. The "handoff guide" lives inside CLAUDE.md too — do not spawn another file for it.Don't skip. List first, judge second.
ls <project-root> to see the rootfind <project-root> -maxdepth 2 -name "*.md" -not -path "*/node_modules/*" -not -path "*/.git/*" to grab every .mdls <project-root>/docs/ 2>/dev/null to confirm whether a docs folder existspackage.json / pyproject.toml / Cargo.toml etc. — scripts and dependenciesProduce an internal checklist (don't show the user): for each existing .md, mark one of three — "merge into CLAUDE.md / delete / keep". *README.md / AGENTS.md / HANDOFF.md / docs/ default to merge-then-delete** — that's the core action of this skill.
Use this fixed structure. Keep each section short.
# <project name>
<1-line summary of what this is>
> Live: <deployment URL, if any>
## PROGRESS
**Current**: <what state the project is in, what the most recent meaningful change was. 1-3 lines>
**Next**: <executable concrete actions. 1-3 bullets, each with a trigger condition or acceptance criterion>
**Known outstanding**: <recorded but unresolved issues. 1-3 bullets. Write "none" if there are none>
## Architecture
<directory tree or layer diagram, max 30 lines. Only what helps a successor; no node_modules>
## Run
<local startup / test / deploy commands. Code block.>
## API / Interfaces
<If the project exposes external interfaces, list endpoints + inputs + outputs. Otherwise skip this section.>
## Known Limits
<things the design cannot do / known gotchas. 3-8 bullets>
## Handoff
<non-obvious facts a new teammate needs: env vars, where secrets live, required local config, common pitfalls>Writing notes per section:
tree -L 2 -I 'node_modules|.git' or similar) — never draw it from memory.<your-token> placeholders — point to the file where it's configured.Use tools, don't just describe.
Order:
rm), only after their content has been merged into CLAUDE.md.env*, or secretsEdge cases:
git mv or plain rm; git tracks the removal. No special archive needed (history lives in git).Tick each item. If you can't, go back and fix.
CLAUDE.md (and docs/ is gone if it was emptied)ls### Length Exemption block stating "actual line count / compression actions taken / why the rest can't be cut". Once that's written it counts as approved; don't agonize repeatedly.Concise. Only list real changes.
## Sync complete
### CLAUDE.md
- Updated: <section> — <one-line reason>
- Rewrote: PROGRESS
### Deleted (content merged into CLAUDE.md)
- README.md
- docs/architecture.md
- ...
### Unresolved
- <ambiguity needing user input> (write only if any)
### Length Exemption (only if CLAUDE.md > 250 lines)
- Actual lines: <N>
- Compression done: <e.g., merged X sections / removed redundant examples / tabularized credentials>
- Why the rest can't be cut: <e.g., 8 sets of service credentials all successor-essential, removing any forces another ssh trip>Runs across agents (Claude Code / Codex / OpenCode). The skill only touches files inside the project directory; it does not touch each agent's own memory system (that's the memory tool's job and is decoupled from this skill).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.