mcp-server-stress — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mcp-server-stress (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Maintainer-only repo-local alias for /mcp-server-surface-test --output-mode=fragments. Routes to the canonical audit prompt at ${CLAUDE_PLUGIN_ROOT}/skills/mcp-server-surface-test/prompts/full.md with fragments-mode emission so findings produce <audited-repo-root>/backlog.d/<finding-id>.md files for the /backlog-intake pipeline.
Invoke /mcp-server-surface-test --output-mode=fragments against the current Claude Code session's repo root (the only path the Roslyn MCP server's sanctioned-root restriction permits — see Limitations below). Forward any additional flags (--no-worktree, --single-agent, --quick) verbatim.
Before v1.X.Y, /mcp-server-stress used a separate maintainer-overlay.md prompt that duplicated ~85% of full.md while adding three repo-coupled phases (backlog.d/ fragment emission, ai_docs/audit-reports/ report path, ai_docs/backlog.md regression cross-check). Every prompt fix had to be applied to both files, and they drifted in subtle ways.
The v1.X.Y refactor folded the maintainer-overlay's unique content into full.md behind:
--output-mode=fragments → Phase 19 emits backlog.d/ fragments (the maintainer-overlay's Phase 19 behavior).ai_docs/audit-reports/ vs audit-reports/ → reports land in the maintainer's doc-audit schema location when that schema exists, top-level otherwise.ai_docs/backlog.md vs backlog.md for regression source → Phase 18's "prior source" probe handles both./mcp-server-stress survives as a 1-line alias because:
/mcp-server-stress reflexively; renaming to /mcp-server-surface-test --output-mode=fragments everywhere is friction..claude/skills/ discovery). The repo-local placement signals that fragments-mode is the maintainer-standard invocation.The skill body delegates entirely to /mcp-server-surface-test. The agent should:
${CLAUDE_PLUGIN_ROOT}/skills/mcp-server-surface-test/SKILL.md for the canonical preconditions, flag handling, and prompt-execution flow.--output-mode=fragments prepended to any $ARGUMENTS the operator passed.--target=<path> — see Limitations).Functionally equivalent to typing /mcp-server-surface-test --output-mode=fragments $ARGUMENTS.
workspace_load refuses any path outside the Claude Code client's sanctioned root, which is fixed at session-start time to the directory Claude Code was opened in. To audit a different repo, open Claude Code in that repo and invoke /mcp-server-surface-test --output-mode=fragments from that session (the skill is plugin-shipped, so it's available from any repo). This is a structural limitation of the MCP root-sanction model; the cross-repo --target= invocation that the prior version of this skill advertised never actually worked end-to-end and has been removed./mcp-server-surface-test)mcp__roslyn__server_info is not callable or connection.state is not ready, halt.git status MUST be empty (Phase 0 baseline + Final surface closure step 3a hard gate).skipped-budget / skipped-context / truncated markers are hard FAILs; orchestrator re-dispatches or records phase-failed-budget as P1.area: security triggers /backlog-intake --publish's refusal contract when the fragment is later published.This skill is a thin alias and does not track its own semantic-call count. To verify that the underlying surface-test run made meaningful Roslyn tool calls, check the audit report's tool-invocation section (Phase 17 in full.md): it records the complete list of MCP tools called and their call counts for the session. If the tool-invocation section is absent or shows zero semantic calls (only infrastructure calls such as workspace_load / server_info), treat the run as potentially incomplete and re-invoke with an explicit --single-agent flag to reduce context-budget pressure.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.