mcp-apps-sync-docs — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mcp-apps-sync-docs (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill updates the MCP Apps documentation based on changes in the @apollo/client-ai-apps CHANGELOG from a specified version onward. It reads the changelog, compares it against the current docs, and makes targeted edits — without committing.
One thing: a minimum version (e.g., 0.6.0 or v0.6.2). All changelog entries from that version to the latest will be analyzed.
Use the GitHub CLI to fetch the full changelog:
gh api repos/apollographql/apollo-client-ai-apps/contents/CHANGELOG.md --jq '.content' | base64 -dThe changelog uses this structure:
## 0.6.5 (2026-03-23)
### Features
#### Feature title
Description and code examples...
### Fixes
#### Fix title
Description...Collect all version sections where the version number is greater than or equal to the user's minimum version. Ignore everything below that version. Parse each section into: version number, date, list of features, list of fixes, and any breaking changes or deprecations called out explicitly.
Read all six documentation files. Understand what each one covers before analyzing the changelog:
docs/source/mcp-apps.mdx — MCP Apps overview: what are MCP apps, high-level overview, architecture diagramdocs/source/mcp-apps-architecture.mdx — How MCP Apps work: the discovery and tool execution phases, architecture diagramsdocs/source/mcp-apps-quickstart.mdx — Step-by-step setup guide using the Apollo AI Apps Template; Vite plugin behavior; project structuredocs/source/mcp-apps-development.mdx — Day-to-day development patterns, directives, hooks, and client usagedocs/source/mcp-apps-prerequisites.mdx — System and account prerequisites before buildingdocs/source/mcp-apps-reference.mdx — API reference: directives (@tool, @prefetch, @private), hooks (useToolInfo, etc.), manifest, configurationFor each changelog entry, decide whether a doc change is needed:
Features — Is this already documented? If not, which file is the right home?
mcp-apps-reference.mdxmcp-apps-quickstart.mdx or mcp-apps-development.mdxmcp-apps-architecture.mdxmcp-apps-prerequisites.mdxDeprecations — Are the deprecated APIs mentioned positively in the docs? Add a deprecation notice near the relevant section and point to the replacement.
Breaking changes / behavior changes — Do the docs describe the old behavior as correct? Update them to reflect the new behavior.
Bug fixes — Generally skip these unless the docs explicitly described the buggy behavior as correct (e.g., documented a workaround that is no longer needed).
Edit the affected files directly using available tools. As you do:
<Note>, code fences with language tags), and heading levelsDo not commit. Leave all edits as unstaged file changes for the user to review.
Give the user a concise report:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.