Atlas / Skills / scalar / Scalar Docs

Scalar DocsCAUTION

skills/scalar/scalar-docs

Scalar is an open-source API platform: ๐ŸŒ Modern REST API Client ๐Ÿ“– Beautiful API References โœจ 1st-Class OpenAPI/Swagger Support

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
โ€”
Hosts
1 documented
License
MIT
Stars
16,296
01

Overview

Scalar is an open-source API platform: ๐ŸŒ Modern REST API Client ๐Ÿ“– Beautiful API References โœจ 1st-Class OpenAPI/Swagger Support

Read from source at commit d0cbc3272843OBSERVED ยท 2026-10-20
Advertisement
02

Host compatibility

What the documentation claims. We have not run a compatibility test.

HostStatusNotes
cursormentioned
03

What it tells the agent

The instruction file, verbatim from the audited commit โ€” this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: scalar-docs
description: Skill for writing and updating scalar.config.json โ€” Scalar Docs configuration reference for users and LLMs.
---

# Scalar Docs Configuration Skill โ€” scalar.config.json

Reference for writing and updating `scalar.config.json`, the central configuration file for [Scalar Docs](https://docs.scalar.com). Use this when creating, editing, or validating Docs configuration for any project.

## Overview

- **File**: `scalar.config.json` (or `scalar.config.json5`)
- **Location**: Repository root by default; path can be overridden in [Scalar Dashboard](https://dashboard.scalar.com/)
- **Schema**: `https://registry.scalar.com/@scalar/schemas/config` โ€” enables autocomplete in VS Code/Cursor when `json.schemaDownload.enable` is true
- **Version**: Use `"scalar": "2.0.0"` for the latest format

## Quick Start

Create a minimal config:

```bash
npx @scalar/cli project init
```

Minimal structure:

```json
{
  "$schema": "https://registry.scalar.com/@scalar/schemas/config",
  "scalar": "2.0.0",
  "info": {
    "title": "My Documentation",
    "description": "The best documentation you've read today"
  },
  "navigation": {
    "routes": {
      "/": {
        "title": "Introduction",
        "type": "page",
        "filepath": "docs/introduction.md"
      }
    }
  }
}
```

Validate config: `npx @scalar/cli project check-config`

---

## Root Properties

| Property     | Type     | Description                                                                 |
| ------------ | -------- | --------------------------------------------------------------------------- |
| `$schema`    | `string` | JSON Schema URL for editor autocomplete and validation                      |
| `scalar`     | `string` | Configuration version. Use `"2.0.0"`                                       |
| `info`       | `object` | Project metadata (title, description)                                       |
| `navigation` | `object` | Navigation structure (header, routes, sidebar, tabs)                        |
| `versions`   | `object` | Multi-version navigation. Use instead of `navigation` for versioned docs    |
| `siteConfig` | `object` | Site-level settings (domain, theme, head, logo, routing)                    |
| `assetsDir`  | `string` | Relative path to assets folder from config root                             |

---

## info

Project metadata displayed across the site:

```json
{
  "info": {
    "title": "My Documentation",
    "description": "Comprehensive guides for our API"
  }
}
```

---

## navigation

All navigation is in `navigation.routes`. Each route key is the URL path; the value is a config object.

### navigation.header

Links in the top bar. Use `type: "spacer"` to push items before it left and after it right.

```json
"header": [
  { "type": "link", "title": "Home", "to": "/" },
  { "type": "spacer" },
  { "type": "link", "title": "Log in", "to": "https://dashboard.example.com/login", "newTab": true },
  { "type": "link", "title": "Register", "style": "button", "icon": "phosphor/regular/user-plus", "to": "https://...", "newTab": true }
]
```

Properties: `title`, `type` (`"link"` | `"spacer"`), `to`, `style` (`"button"` | `"link"`), `icon`, `newTab`

The header only renders when this array has at least one item, and it is where the logo goes. A lone `{ "type": "spacer" }` is enough to get a header with just the logo.

### navigation.sidebar

Links at the bottom of the sidebar:

```json
"sidebar": [
  { "title": "Log in", "to": "https://...", "newTab": true }
]
```

### navigation.tabs

Tabs for quick access to sections:

```json
"tabs": [
  { "title": "API", "to": "/api", "icon": "phosphor/regular/plug" }
]
```

Tabs and a header work together, and neither requires the other. With tabs but no header, the logo renders in the tab bar.

### Route Types

#### Page (`type: "page"`)

Markdown/MDX content from a file:

```json
"/getting-started": {
  "type": "page",
  "title": "Getting Started",
  "filepath": "docs/getting-started.md",
  "description": "Optional SEO description",
  "icon": "phosphor/regular/rocket",
  "showInSidebar": true,
  "layout": { "toc": true, "sidebar": true }
}
```

Layout: `toc` (default `true`), `sidebar` (default `true`).

**Hidden pages:** Set `showInSidebar: false` to hide a page from the sidebar while keeping it accessible via its direct URL.

#### OpenAPI (`type: "openapi"`)

API reference from file, Registry, or URL:

**File:**
```json
"/api": {
  "type": "openapi",
  "title": "My API",
  "filepath": "docs/api-reference/openapi.yaml",
  "icon": "phosphor/regular/plug"
}
```

**Registry:**
```json
"/api": {
  "type": "openapi",
  "title": "My API",
  "namespace": "my-organization",
  "slug": "your-api"
}
```

**URL:**
```json
"/api": {
  "type": "openapi",
  "title": "My API",
  "url": "https://example.com/openapi.json"
}
```

Display modes: `folder` (default), `flat`, `nested`.

**Single page mode:** Set `singlePage: true` to render all operations on a single page instead of creating separate pages for each operation:

```json
"/api": {
  "type": "openapi",
  "title": "My API",
  "filepath": "docs/api-reference/openapi.yaml",
  "singlePage": true
}
```

API Reference options (authentication, theme, etc.) go in a `config` object โ€” same options as the [API Reference configuration](https://docs.scalar.com/configuration).

#### Group (`type: "group"`)

Collapsible section with children:

```json
"/products": {
  "type": "group",
  "title": "Products",
  "mode": "flat",
  "icon": "phosphor/regular/package",
  "children": {
    "/docs": { "type": "page", "title": "Documentation", "filepath": "docs/documentation.md" },
    "/api": { "type": "openapi", "title": "API Reference", "filepath": "openapi.yaml" }
  }
}
```

Modes: `flat`, `nested`, `folder` (default).

**Folder landing pages:** Add a `page` property to make clicking the folder navigate to a page:

```json
"/company": {
  "type": "group",
  "title": "Company",
  "mode": "folder",
  "page": { "type": "pa
04

Trust audit

CAUTIONgrade B ยท trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (6)

MEDIUMInventory / provenance ยท inv.symlink ยท CWE-1104
.agents/skills/scalar-design-system
.agents/skills/scalar-design-system
Why it matters. link not followed
MEDIUMInventory / provenance ยท inv.symlink ยท CWE-1104
.claude/skills
.claude/skills
Why it matters. link not followed
LOWInventory / provenance ยท inv.symlink ยท CWE-1104
CLAUDE.md
CLAUDE.md
Why it matters. link not followed
LOWFilesystem / path ยท fs.traversal ยท CWE-22, CWE-59
packages/openapi-validator/tests/openapi3-examples/3.0/fail/license_identifier.test.ts:3
import { validate } from '../../../../src/index'
LOWFilesystem / path ยท fs.traversal ยท CWE-22, CWE-59
packages/openapi-validator/tests/openapi3-examples/3.1/pass/license_identifier.test.ts:3
import { validate } from '../../../../src/index'
LOWFilesystem / path ยท fs.traversal ยท CWE-22, CWE-59
packages/openapi-validator/tests/openapi3-examples/3.2/pass/license_identifier.test.ts:3
import { validate } from '../../../../src/index'

Gates applied: no_behavioural_pass.

Audited 2026-10-20 ยท audit v0.4.1 ยท source sha d0cbc3272843full audit observations/trust-audit/skill/scalar__scalar-docs.json ยท Report an issue / request a re-scan
05

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-20d0cbc3272843CAUTIONB89first audit
06

Questions

What does the scalar-docs โ€” scalar/scalar skill do?

Scalar is an open-source API platform: ๐ŸŒ Modern REST API Client ๐Ÿ“– Beautiful API References โœจ 1st-Class OpenAPI/Swagger Support

Is scalar-docs โ€” scalar/scalar safe to install?

With care. The audit graded it B (89/100) and found 6 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can scalar-docs โ€” scalar/scalar access on my machine?

The audit observed no filesystem, network or shell use at all in its source.

Which assistants does scalar-docs โ€” scalar/scalar work with?

Its documentation mentions cursor. That is what the text claims, not a compatibility test we ran.

How current is this page?

The grade is for one exact copy of the source (d0cbc3272843), read on 2026-10-20. The repository is watched, and a new audit runs when it changes โ€” this is the first audit.

Add this badge to your README

Shows this page's audit result and links back to it. It updates when the audit does.

ModelsAtlas audit badge

Markdown
[![ModelsAtlas audit: Scalar Docs](https://modelsatlas.com/skills/scalar/scalar-docs/badge.svg)](https://modelsatlas.com/skills/scalar/scalar-docs/)

Not your listing, or something out of date? Claim or update your listing.

Advertisement