yfiles-init — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited yfiles-init (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Create a complete yFiles application following package conventions.
/yfiles-init [demo-name]Creates in the current directory if no name is specified.
- [ ] Verify GraphComponent API with yFiles MCP
- [ ] Create HTML entry point
- [ ] Create main TypeScript/JavaScript file
- [ ] Adjust import paths for license
- [ ] Configure ESLint with yFiles plugin (recommended)
- [ ] Test in browserStep 1: Verify APIs
Use the yFiles MCP server to confirm the current API:
yfiles:yfiles_get_symbol_details(name="GraphComponent")
yfiles:yfiles_list_members(name="GraphComponent", includeInherited=true)Step 2: Create files
Essential pattern:
import { GraphComponent, GraphEditorInputMode, License } from '@yfiles/yfiles'
import licenseData from '../../lib/license.json'
License.value = licenseData // MUST come first
const graphComponent = new GraphComponent('#graphComponent')
graphComponent.inputMode = new GraphEditorInputMode()See references/examples.md for complete file templates.
Step 3: Adjust import paths
License path depends on demo location:
demos-ts/category/demo/ → ../../../lib/license.json../ depth to match directory nestingStep 4: Configure ESLint (Recommended)
The official @yfiles/eslint-plugin helps catch common mistakes and ensures yFiles 3.0 best practices:
npm i -D eslint typescript typescript-eslint @yfiles/eslint-pluginSee reference.md for complete ESLint configuration.
Step 5: Test
npm start
# Navigate to http://localhost:4242/demos-ts/your-demo/License.value = licenseData before any other yFiles APInew GraphComponent('#id') or pass a DOM elementgraphComponent.graphgraph.nodeDefaults.style before createNode()~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.