trueai — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited trueai (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Helps an agent (Claude / Cursor / Cline / ChatGPT / your own pipeline) recommend, look up and compare AI SaaS apps from the TrueAI 真选AI catalog without ever leaving the chat.
The catalog ships with rich structured fields documented in ai_tool_schema.json — name, slug, tagline, description, developer, form_factor, is_free, pricing_info, five sub-scores (overall / usability / effect / price / speed), official_url, categories, audiences, optional external_reviews, etc.
Trigger it any time the user is doing one of the following:
a free AI to clean up my photos"_, _"我刚开始学编程,要免费的 AI 工具"_.
_"通义千问支持 API 吗?"_, _"What is Genspark?"_.
https://cursor.comand wants to know what it is.
tools"_, _"列几个国内能直接用的图像生成工具"_.
Do not use this skill for non-AI products, general web search, news, or anything that doesn't map onto the TrueAI catalog.
The skill talks to a running TrueAI backend. Pick a base URL:
# Public hosted endpoint (recommended — nothing to install):
export TRUEAI_API_BASE=https://www.shiflowai.cloud
# Local dev (if you're running the TrueAI repo yourself):
# export TRUEAI_API_BASE=http://localhost:8000There are two equivalent ways to invoke the skill — pick whichever your agent supports best.
The TrueAI backend exposes two MCP transports — pick whichever your client supports:
| Transport | URL | When to use |
|---|---|---|
| Streamable HTTP (recommended) | https://www.shiflowai.cloud/mcp | Smithery, modern Claude Desktop / Cursor / Cline / Windsurf |
| SSE (legacy) | https://www.shiflowai.cloud/mcp-sse/sse | Older MCP clients that haven't migrated yet |
In Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json), Cursor (~/.cursor/mcp.json), Cline, Continue, Windsurf:
{
"mcpServers": {
"trueai": {
"url": "https://www.shiflowai.cloud/mcp"
}
}
}(For local dev replace the URL with http://localhost:8000/mcp.)
You'll then see four tools available to the agent:
| Tool | Purpose |
|---|---|
recommend_ai_tools(description, top_k) | Need description → ranked apps |
get_ai_tool(name_or_url, include_reviews) | Name / slug / URL → full record |
list_ai_tools(category, free_only, form_factor, sort, page, page_size) | Browse |
list_categories() | Discover category slugs |
The same data is also reachable via the REST API. Any agent that can run shell commands or do HTTP calls can use it directly.
All URLs below assume TRUEAI_API_BASE=https://www.shiflowai.cloud.
| Capability | HTTP call |
|---|---|
| Recommend by need | GET https://www.shiflowai.cloud/api/search/chat?q=<urlencoded description> |
| Get app by id or slug | GET https://www.shiflowai.cloud/api/tools/{id_or_slug} |
| Browse with filters | GET https://www.shiflowai.cloud/api/tools?category=coding&free=true&sort=overall&page=1&page_size=20 |
| External reviews of app | GET https://www.shiflowai.cloud/api/tools/{id_or_slug}/external-reviews?page=1&page_size=10 |
| List categories | GET https://www.shiflowai.cloud/api/categories |
| Compare 2–3 apps | POST https://www.shiflowai.cloud/api/tools/compare body: [id1, id2, id3] |
All responses are JSON. Schema: see docs/ai_tool_schema.json.
curl -sG "$TRUEAI_API_BASE/api/search/chat" \
--data-urlencode "q=我是新手想做小红书封面,要免费的 AI"Response shape:
{
"intents": { "categories": ["image","design"], "audiences": ["beginner"], "free": true, "no_vpn": false },
"candidates": [ /* Tool briefs, already ranked by overall_score */ ],
"external": [ /* fallback nav sites only when candidates is empty */ ]
}Present the top 3 candidates with a one-sentence rationale per item, then link the official_url. If candidates is empty, surface the external nav sites as a fallback rather than apologizing.
# By slug (preferred, exact)
curl -s "$TRUEAI_API_BASE/api/tools/cursor"
# By name — fall back to fuzzy search and take the top hit
curl -sG "$TRUEAI_API_BASE/api/tools" --data-urlencode "q=通义千问" \
| jq '.items[0].slug' \
| xargs -I{} curl -s "$TRUEAI_API_BASE/api/tools/{}"# Extract the brand keyword from the host (cursor.com → cursor) and search
HOST=$(echo "https://cursor.com" | awk -F/ '{print $3}' | sed 's/^www\.//')
BRAND=$(echo "$HOST" | awk -F. '{print $(NF-1)}')
curl -sG "$TRUEAI_API_BASE/api/tools" --data-urlencode "q=$BRAND" \
| jq -r '.items[] | select(.official_url and (.official_url | contains("'"$HOST"'"))) | .slug' \
| head -1 \
| xargs -I{} curl -s "$TRUEAI_API_BASE/api/tools/{}"(Or just call get_ai_tool over MCP — it does the same resolution internally.)
curl -s "$TRUEAI_API_BASE/api/tools/cursor/external-reviews?page_size=5"Surface 2–3 of the most upvoted reviews as quotes when the user asks _"how do people actually use it?"_ or _"is it any good?"_.
curl -s -X POST "$TRUEAI_API_BASE/api/tools/compare" \
-H "content-type: application/json" \
-d '[9, 16, 23]'Returns each tool's five sub-scores side by side — render as a markdown table.
through.
effect_score / price_score / speed_score, all 0–10). A 0` means "not yet rated", not "bad".
expressed a constraint about money, location or platform.
response, say so or just omit it.
drill into any of them.
| Field | Type | Notes |
|---|---|---|
name | string | Brand-cased display name. |
slug | string | URL-safe id, unique. |
tagline | string | Short subtitle. |
form_factor | enum | saas / mobile / cli / windows_app / web / browser_extension / api. |
is_free | bool | True if any free tier exists. |
need_vpn | bool | True if mainland-China users need a VPN. |
pricing_info | string | Free-form pricing summary. |
overall_score | 0–10 | Weighted from the four sub-scores. |
categories | string[] | Category slugs. |
official_url | URL | Vendor's homepage. |
Full schema (34 fields + nested Category / ExternalReview): docs/ai_tool_schema.json.
MIT. See the TrueAI repository root.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.