Mcp Codedoc — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Codedoc (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
CodeDoc is an AI-powered "Project Guardian" built for Cursor and Claude. CodeDoc is a high-performance architectural sentinel that transforms Cursor into a Project Architect by enforcing security, structural integrity, and production-grade code quality across your entire codebase. Unlike general AI coding assistants, CodeDoc is a context-aware engine designed to enforce structural integrity, SOLID principles, and clean code standards directly within your local environment. CodeDoc goes beyond simple code generation. It acts as a "Guardian" for your project, ensuring that every refactor is secure, every change is understood across the "Radius," and every line of code meets industry-standard health metrics.
node_modules, .env, and binary files.While standard AI chat can explain code, CodeDoc is built for a professional "Review-First" workflow. It bridges the gap between temporary chat conversations and permanent repository health.
CodeDoc is the only tool that bridges the gap between Code Execution and Compliance.
The Challenge: Cursor suggests code, but does it follow your team's specific naming conventions? Does it avoid nested loops? The Solution: With CodeDoc Phase 2, you provide your Development Manifesto. CodeDoc then audits your staged files against those specific rules, refactors the logic, and documents the changes in one step.
It doesn't just write code; it enforces your standards.
| Feature | Standard AI Chat | CodeDoc MCP |
|---|---|---|
| Persistence | Lost when chat is cleared | Permanent in /documentation folder |
| Context | Limited to open tabs | Scans entire project structure |
| Workflow | Reactive (answering questions) | Proactive (pre-commit style auditing) |
| Output | Raw text in chat window | Professional, version-controlled Markdown |
| System Awareness | No local file access | Reads & Writes directly to your workspace |
CodeDoc doesn't just write code; it follows a professional safety-first workflow:
Middleware.java even if it's buried in src/main/resources/internal/.Stop leaks before they happen. CodeDoc scans uncommitted files or specific folders for API keys, tokens, and vulnerabilities.
Prompt: "codedoc, scan my uncommitted changes for secrets before I push."
Understand the ripple effect of your changes. It identifies exactly which files and line numbers will break when you modify a function signature or rename a variable.
Prompt: "What happens if I change the 'fetchData' argument to an object in apiService.ts?"
Get an instant audit of your code health. CodeDoc provides a 1-10 score, breaks down complexity, and identifies architectural debt.
Prompt: "Give me a health score for login.tsx and provide the optimised code based on the health."
Language-agnostic support for Java, TypeScript, Python, C++, C#, and more. CodeDoc intelligently prunes node_modules and heavy folders to provide lightning-fast results without freezing your system.
To add the Guardian Engine to your Cursor IDE:
Cmd+Shift+J or Ctrl+Shift+J).{
"mcpServers": {
"codedoc": {
"command": "uvx",
"args": [
"--refresh",
"--from",
"git+[https://github.com/akshay1018/mcp-codedoc.git](https://github.com/akshay1018/mcp-codedoc.git)",
"codedoc"
]
}
}
}
Once installed, you don't need to learn any special commands. Just talk to the AI in your sidebar.
"@codedoc scan and refactor Login.tsx using SOLID principles. Extract logic into a service file."
"@codedoc scan project files and identify any files missing documentation."
"@codedoc refactor Middleware.java for better performance before I push to main."
Every time you run a documentation task, CodeDoc creates a folder named /documentation in your project root.
Plaintext
your-project/ ├── documentation/ │ ├── documentation_snippet_20251227_010000.md <-- Your Report ├── # other files
Each .md file generated includes:
#
If you encounter any issues or have feature requests, please open an issue on the GitHub Repository.
License: MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.