bilt-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited bilt-builder (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use the Bilt MCP tools to create and manage mobile app projects. Keep project identifiers from tool responses and use the camelCase argument names below.
| Tool | Inputs | Use |
|---|---|---|
bilt_list_projects | none | List the authenticated user's projects |
bilt_get_project | projectId | Get one project |
bilt_create_project | name, optional description | Create a project |
bilt_get_session | projectId | Get session state, workflows, and hasActiveWorkflows |
bilt_send_message | projectId, optional message, answers, workflowId | Start work, send follow-up instructions, or answer paused questions |
bilt_cancel_workflow | projectId | Cancel the active workflow |
bilt_get_messages | projectId | Get the project's conversation history |
bilt_send_message requires at least one of message or answers. For a fresh request, provide projectId and message.
When a workflow pauses for questions, call bilt_send_message again with its workflowId. Encode the answers as a JSON string:
{
"projectId": "project-id",
"workflowId": "workflow-id",
"answers": "[{\"questionIndex\":0,\"selectedOptions\":[\"Option A\"]}]"
}There is no bilt_resume_workflow tool. Question answers resume through bilt_send_message.
bilt_list_projects before creating a project. Reuse a matching project when the user asks to modify existing work.id as projectId.bilt_get_session with projectId.hasActiveWorkflows is true, do not send unrelated work. A queued workflow is active; wait and check the session again.bilt_send_message with a specific instruction.queued: keep the workflowId and check bilt_get_session until the queued or running workflow clears.paused with pauseType: questions: send structured answers through bilt_send_message.paused with pauseType: secrets or supabase: share projectUrl with the user and ask them to complete the action there. The workflow resumes automatically afterward.completed: report the result and projectUrl.error or timeout: report the safe error and inspect bilt_get_messages before retrying.projectUrl with the user. Project links use https://app.bilt.me/agent/{projectId}.projectId, workflowId, questionIndex, and selectedOptions.bilt_get_session, and bilt_get_messages.Bilt is available at https://mcp.bilt.me/mcp over Streamable HTTP with Authorization: Bearer <token>. The legacy /mcp/sse endpoint is unavailable.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.