codebase-graph-module-rules Audit report.

Warnings

• SKILL.md does not explain how Graphify is installed, configured, or invoked, so a user may not know the required environment/setup.
• The skill references another skill, codebase-graph-business-rules, without clarifying whether it is expected to be present or available.
• The verify script checks for credential-like patterns, but SKILL.md itself does not provide explicit guidance on handling secrets discovered during analysis beyond avoiding output/persistence.
• Low GitHub adoption signal
• Quality score needs review
• GitHub adoption: 24 GitHub stars
• Stars/forks activity: 24 stars, 6 forks; issue activity unavailable in current metadata

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.