Personal Context — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Personal Context (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A minimal system for giving LLMs your writing voice, opinions, and style. Curated markdown files served via MCP using FastMCP.
Inspired by Karpathy's LLM Wiki and nlwhittemore's Personal Context Portfolio.
More background on the why behind this project here.
context/*.md → FastMCP server → MCP → Claude Code (or any MCP client)You maintain 6 markdown files about yourself. A FastMCP server exposes them as tools. When you ask an LLM to write something, it can pull your context and match your voice.
| File | What It Captures |
|---|---|
identity.md | Background, career arc, personal details |
writing-style.md | Voice, tone, sentence patterns, vocabulary, annotated examples |
opinions.md | Stances on topics you write about |
expertise.md | Domains of deep knowledge |
projects.md | Current and notable past projects |
communication.md | How you communicate in different contexts (Slack, email, docs) |
Each file has YAML frontmatter tracking last_updated and source_refs (which source materials informed the content).
context/ — those are my files, not yoursgit clone <this-repo> personal-context
cd personal-context
uv venv && source .venv/bin/activate
uv pip install -e ".[dev]"If you have a folder of markdown blog posts or writing samples, the ingest script can generate draft context files:
# Copy or symlink your markdown files
ln -s /path/to/your/blog/posts sources/blogs
# Generate drafts (--cutoff filters by date in frontmatter)
python scripts/ingest.py sources/blogs/ --cutoff 2024-01-01 --output draftsThis creates draft files in drafts/ with excerpts grouped by category. Review them, extract what's useful, and write your curated versions into context/.
The ingest script expects markdown files with YAML frontmatter containing title, pubDate, and optionally categories. If your files don't have frontmatter, you can skip this step and write context files manually.
If you don't have existing writing to ingest, just create the 6 files in context/ yourself. Use this template:
---
last_updated: 2026-05-30
source_refs: []
---
# Writing Style
## Voice
[How do you write? Conversational? Formal? Technical? Direct?]
## Patterns
[Recurring structures, transitions, vocabulary choices]
## Examples
[2-3 representative excerpts from your actual writing, with annotations]A good approach: start a Claude Code session and ask it to interview you. Share writing samples and let it draft context files for you to review and edit.
The MCP server runs entirely locally — Claude Code spawns it as a subprocess on your machine, and it just reads markdown files from disk. No data is sent to external services beyond the normal Claude API calls.
Register the server as a user-scoped MCP so it's available in every Claude Code session, regardless of which project you're working in:
claude mcp add --scope user personal-context -- /absolute/path/to/personal-context/.venv/bin/python /absolute/path/to/personal-context/server.pyRestart Claude Code. The MCP tools will be available in every session.
To use the same context on a work machine or second computer:
git clone <your-fork> personal-contextcd personal-context && uv venv && source .venv/bin/activate && uv pip install -e . claude mcp add --scope user personal-context -- /absolute/path/to/personal-context/.venv/bin/python /absolute/path/to/personal-context/server.pyThat's it — same context files, same tools, works in any repo you open. If you keep your context files committed, git pull on either machine keeps them in sync.
By default, Claude Code won't call MCP tools unless you ask. To have it pull your context automatically when drafting written content, add a rule to your global ~/.claude/CLAUDE.md:
## Personal Context (MCP)
When drafting any written content (emails, messages, docs, social posts, bios, etc.), call `get_writing_style` from the `personal-context` MCP server first to match my voice and tone. For tasks that benefit from broader context (introductions, project summaries, etc.), use `get_all_context` instead.In a new Claude Code session:
get_writing_style or get_all_contextThis system is manually curated, you update the files, this is not an automated pipeline.
writing-style.mdprojects.md and identity.mdsources/private/ (gitignored) or sources/blogs/, re-run ingest if helpfulcontext/*.md file directlylast_updated date in frontmattersource_refsWork emails, Slack exports, or other private writing go in sources/private/ which is gitignored. You can reference them in source_refs for provenance without committing the content.
Since sources/private/ is gitignored, these files are device-specific — they won't sync when you git pull on another machine. If you need the same private sources on multiple machines, copy them manually or sync via something outside git (e.g., iCloud, Dropbox).
sources/private/ holds raw source material for ingest — it is not read by the MCP at runtime. If you have curated context that the MCP should serve but that must stay out of a public repo, put it in `context/private.md`, which is gitignored.
The server globs context/*.md, so context/private.md is returned by get_all_context() and context://private.md locally, but git never commits it. Like sources/private/, it's device-specific — copy it manually if you run the MCP on another machine.
If you add new blog posts or writing samples to sources/blogs/:
python scripts/ingest.py sources/blogs/ --cutoff 2024-01-01 --output draftsThis regenerates drafts (in drafts/, also gitignored). Review the new excerpts and fold anything useful into your context files.
The server exposes:
| Tool/Resource | What It Does |
|---|---|
get_writing_style() | Returns your writing-style.md — the most commonly needed file |
get_all_context() | Returns all context files as a dict (includes a local private.md if present) |
context://{filename} | Resource access to any individual file by name |
personal-context/
├── context/ # Your curated context files (the product)
│ └── private.md # Optional private served context (GITIGNORED)
├── sources/
│ ├── blogs/ # Public writing samples (committed or symlinked)
│ └── private/ # Private writing samples (GITIGNORED)
├── scripts/
│ └── ingest.py # Bootstrap drafts from existing writing
├── drafts/ # Generated drafts from ingest (GITIGNORED)
├── tests/ # Tests for ingest script and server
├── server.py # FastMCP MCP server
├── pyproject.toml
└── README.mdpython -m pytest -vThis repo is designed to be public, but remember you are putting personal information in it. A few things to know:
get_context resource handler validates that requested filenames resolve inside the context/ directory. Traversal attempts like ../../etc/passwd are rejected.sources/private/ is in .gitignore so work emails, Slack exports, etc. stay local. But be careful with source_refs in frontmatter — the filenames are committed even if the files aren't. Use opaque names like work-email-1.md instead of descriptive titles.context/private.md is in .gitignore for curated context the MCP should serve locally but never commit (e.g. work-sensitive notes). It's the runtime-served counterpart to sources/private/.sources/private/ directory exists so you can reference work writing without committing it.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.