canonical-root-marketplace-path-normalization-60c47a — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited canonical-root-marketplace-path-normalization-60c47a (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Domain: extensions-mcp Trigger: Use when project settings declare relative extension paths but the shared registry spans multiple worktrees or checkouts. Source Pattern: Distilled from reviewed shared-registry path normalization logic.
Resolve relative local source paths against the repository's canonical root rather than the current worktree directory before comparing them to shared registry entries. This produces one stable identity for a shared record, prevents worktrees from overwriting each other with checkout-specific paths, and avoids dead paths when temporary worktrees disappear. Normalize before diffing so equivalent repo-relative settings are treated as the same source.
If a repo declares ./plugins/internal, normalize it against the canonical checkout root so every worktree resolves to the same shared registry path.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.