Is dearuser-health safe to install?

SaferSkills independently audited dearuser-health (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

mcp/skills/dearuser-health/SKILL.md · 1 file

mcp/skills/dearuser-health/SKILL.md1.5 KB · Markdown

name: dearuser:health

description: System health — 0-100 score for om dit setup (skills, hooks, scheduled tasks, MCP servers) stadig hænger sammen, eller er ved at drive fra hinanden. Powered by Dear User.

allowed-tools: "mcp__dearuser__health, Bash"

Dear User — Health

Kør et strukturelt sundhedstjek med Dear User MCP serveren. Giver en 0-100 score plus kategori-breakdown og fund rangeret efter alvorlighed.

Kør rapport

Prøv at kalde mcp__dearuser__health med default parametre (ingen argumenter — global scope, alle fund).
Hvis tool'et ikke er tilgængeligt (første turn i session — MCP tools loader lazy), brug Bash-fallback:

   npx -y -p @poisedhq/dearuser-mcp dearuser-run health 2>/dev/null

Output HELE rapporten som dit svar — summér ikke, forkort ikke, tilføj ikke kommentarer i rapport-delen.

Hvis brugeren spørger om en specifik finding-type, send focus med relevant værdi (orphan, overlap, closure, substrate, mcp_refs, backup, stale_schedule). Bash: npx -y -p @poisedhq/dearuser-mcp dearuser-run health '{"focus":"orphan"}' 2>/dev/null

Efter rapporten

Hvis rapporten indeholder pending recommendations, tilbyd at implementere dem via mcp__dearuser__implement_recommendation. Spørg brugeren hvilke de vil køre.

Regler

Rapporten er pre-formateret markdown. Vis den eksakt som returneret.
Dansk svar hvis brugeren skriver på dansk.
Hvis critical findings er relateret til leaked secrets, fremhæv at brugeren skal rotere dem straks.

dearuser-health— agent skill

Is dearuser-health safe to install?

Dear User — Health

Kør rapport

Efter rapporten

Regler

Audit the pieces. Scan the whole. Decide.