Ask262 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ask262 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for exploring the ECMAScript specification and its implementation in engine262.
The fastest way to tinker with JavaScript internals:
npx add-mcp "https://ask262.bendtherules.in/mcp"ask262Debug.startImportant() to mark the key parts of your code| Tool | Description |
|---|---|
ask262_search_spec_sections | Vector search ECMAScript spec for relevant sections |
ask262_get_section_content | Retrieve full content from a spec section |
ask262_evaluate_in_engine262 | Execute JS and capture spec sections, with "important" marking to focus on relevant parts |
Use the hosted MCP server without any local setup:
npx add-mcpInstall ask262 MCP server to your client with one command:
npx add-mcp "https://ask262.bendtherules.in/mcp"If you prefer to configure manually:
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"ask262": {
"url": "https://ask262.bendtherules.in/mcp"
}
}
}OpenCode (~/.config/opencode/opencode.json):
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ask262": {
"type": "remote",
"url": "https://ask262.bendtherules.in/mcp",
"enabled": true
}
}
}qwen3-embedding:8b \(ollama pull qwen3-embedding:8b)
# Clone and install
git clone https://github.com/bendtherules/ask262
cd ask262
bun install
# Or install globally
bun install -g ask262Copy .env.example and configure:
cp .env.example .envKey variables:
ASK262_EMBEDDING_PROVIDER: Choose ollama (local) or fireworks (cloud). Default: ollamaOLLAMA_HOST: Ollama server URL. Default: http://localhost:11434FIREWORKS_API_KEY: Required if using Fireworks. Get from https://app.fireworks.aiASK262_PORT: HTTP server port. Default: 8081Example `.env`:
# Use Fireworks for embeddings (faster, cloud-based)
ASK262_EMBEDDING_PROVIDER=fireworks
FIREWORKS_API_KEY=fw_your_key_here
# Or use local Ollama (default)
# ASK262_EMBEDDING_PROVIDER=ollama
# OLLAMA_HOST=http://localhost:11434Claude Desktop (claude_desktop_config.json):
#### stdio (no server needed)
{
"mcpServers": {
"ask262": {
"command": "bunx",
"args": ["ask262"]
}
}
}#### http (requires server)
{
"mcpServers": {
"ask262": {
"url": "http://localhost:8081/mcp"
}
}
}⬇️ Required for HTTP config above:
bun run ask262-http # start HTTP serverOpenCode (~/.config/opencode/opencode.json):
#### stdio (no server needed)
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ask262": {
"type": "local",
"command": ["bunx", "ask262"],
"enabled": true
}
}
}#### http (requires server)
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"ask262": {
"type": "remote",
"url": "http://localhost:8081/mcp",
"enabled": true
}
}
}⬇️ Required for HTTP config above:
bun run ask262-http # start HTTP serverHTTP Server Endpoints:
| Endpoint | Description |
|---|---|
GET /health | Health check |
GET/POST /mcp | MCP protocol endpoint |
GET / | MCP Inspector UI (auto-connects to /mcp) |
Note: `/mcp` is defined before the inspector's catch-all `/` route to ensure proper request handling.
# Run MCP server tests
bun run test-mcp-server
# Test evaluate tool with timeout
bun run test-evaluate-timeout
# Test search functionality
bun run test-search-spec-sectionsFor development or using a custom ECMAScript specification:
git clone https://github.com/bendtherules/ask262
cd ask262
bun install./spec-built/multipage/ - Built ECMAScript spec HTML filesSteps -
git clone https://github.com/tc39/ecma262npm i && npm run buildout/ from ecma262 to spec-built/ in this repo bun run ingest bun run releaseThis will:
storage/Other options: bun run release -- --minor, bun run release -- --major, or bun run release -- --no-bump
ISC
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.