The previous commit only landed the research-folder rename — a multi-path git add silently failed and left CONTEXT.md, ADR-0012, and the actual skill files unstaged. This lands them: the agentsmd-audit skill itself (three deterministic validators for secrets, structure, and drift against a target repo's AGENTS.md), its bats test suite, provenance record, and the CONTEXT.md/ADR entries documenting why this lives in core rather than kyberforge. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
666 B
666 B
scripts/
Deterministic validators this skill shells out to instead of relying on LLM judgment for mechanical checks.
| File | Purpose |
|---|---|
validate-secrets.sh |
Scans every AGENTS.md file (root + nested) for embedded secrets, API keys, tokens, and connection strings |
validate-structure.sh |
Checks for empty/placeholder content, the common-sections checklist, and nested-vs-root duplication |
validate-drift.sh |
Resolves referenced npm/make commands and file paths against the actual repo state |
All three take a single <repo-root> argument, print FAIL/INFO/SUGGESTION findings to stdout, and exit non-zero only on FAIL.