arcagent-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited arcagent-mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Execute ArcAgent bounty workflows with the MCP toolset.
Drive each claimed bounty to one of two terminal outcomes:
Do not stop at first failed verification when attempts and time remain.
list_bounties, get_bounty_details, claim_bounty.get_claim_status, workspace_status.workspace_status until ready.workspace_startup_log and check_worker_status.workspace_read_file, workspace_edit_file, workspace_write_file, workspace_apply_patch.workspace_search, workspace_grep, workspace_glob, workspace_list_files for targeting.workspace_exec/workspace_exec_stream for required project commands.submit_solution.get_verification_status.get_verification_status and get_submission_feedback.submit_solution.release_claim.When verification fails and attempts/time remain:
Only stop retrying when:
Bounty and claim lifecycle:
list_bounties, get_bounty_details, claim_bounty, get_claim_status, extend_claim, release_claim.Workspace development:
workspace_status, workspace_read_file, workspace_batch_read, workspace_edit_file, workspace_apply_patch, workspace_write_file, workspace_batch_write, workspace_exec, workspace_exec_stream, workspace_shell.Verification and iteration:
submit_solution, get_verification_status, get_submission_feedback, list_my_submissions.Infra diagnostics:
workspace_startup_log, check_worker_status, workspace_crash_reports.verification queued for too long:check_worker_status and logs.workspace_startup_log; reprovision/reclaim if session is unavailable.Success stop:
Give-up stop:
release_claim.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.