Samskriti Project — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Samskriti Project (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A local MCP server that lets multiple AI coding tools share structured project state — decisions, tasks, bugs — so they coordinate without re-explaining.
Claude Code Cursor Codex
│ │ │
│ read/write │ read/write │
└──────────────┼─────────────┘
▼
┌───────────────────────┐
│ samskriti-project │ (local MCP server, stdio)
└───────────┬───────────┘
▼
┌───────────────────┐
│ SQLite store │ ~/.samskriti/ (100% local)
└───────────────────┘You make a decision with one AI tool, then switch to another and have to re-explain everything from scratch. Each assistant starts cold, with no idea what was already decided, tried, or rejected. This server gives them a shared, structured ledger of your project so any tool can read what the others wrote.
Install with pipx (recommended — this puts the samskriti-project command on your PATH so your AI tools can find it):
pipx install git+https://github.com/Escalate17/samskriti-projectDon't have pipx? Install it first: python3 -m pip install --user pipx && python3 -m pipx ensurepath (then restart your terminal).
To verify the install worked:
samskriti-project --helpIf you see the help text, you're ready to connect it.
samskriti-project setup # Claude Code
samskriti-project setup --cursor # Cursor
samskriti-project setup --codex # Codex
samskriti-project setup --all # all threeThis writes the MCP config block into the right file for you (backing up any existing config first), so you don't have to hand-edit JSON. Then fully quit and reopen your tool — MCP servers are loaded only when the tool starts, so a running session won't see it until you restart.
Add the server to your AI tool's MCP config, then fully restart the tool.
Claude Code (~/.claude.json):
{
"mcpServers": {
"samskriti-project": {
"command": "samskriti-project",
"args": []
}
}
}Cursor (~/.cursor/mcp.json):
{
"mcpServers": {
"samskriti-project": {
"command": "samskriti-project",
"args": []
}
}
}Codex (~/.codex/config.toml):
[mcp_servers.samskriti-project]
command = "samskriti-project"
args = []If your tool can't find the command, it's a PATH issue — runwhich samskriti-projectto get the full path, and use that full path as thecommandvalue instead.
In Claude Code, type /mcp — you should see samskriti-project listed with its 8 tools. (Cursor and Codex have similar MCP status indicators in their settings.)
Plus three shortcuts — catchup, open, and log — for the most common actions. See Helper commands below.
Already installed? Runpipx reinstall samskriti-projectto pick up the new commands. If you installed an earlier build (it shows up assamskriti-project-localinpipx list), migrate once:pipx uninstall samskriti-project-local && pipx install git+https://github.com/Escalate17/samskriti-project.
/sam slash commandTyping "use the samskriti-project MCP …" every time is tedious. Both Claude Code and Cursor support custom slash commands — Markdown prompt files you drop in a folder. They don't bind directly to a tool, but they inject a prompt that tells the agent to use this server, so /sam <message> does the right thing. (Codex has no slash-command mechanism for MCP; just say "use samskriti-project to …" — the agent picks the tool.)
Claude Code — save slash-commands/claude-code/sam.md to one of:
~/.claude/commands/sam.md (available in every project), or<your-project>/.claude/commands/sam.md (that project only).Then in Claude Code: /sam what's open or /sam log we're dropping the Redis cache. The $ARGUMENTS placeholder in the file receives everything you type after /sam.
Cursor (1.6+) — save slash-commands/cursor/sam.md to:
~/.cursor/commands/sam.md (global), or<your-project>/.cursor/commands/sam.md (that project only).Then type / in Cursor's Agent box, pick sam, and add your message.
No true client feature binds a slash command straight to an MCP call yet — this command file is the closest supported equivalent, and it works today.
Three shortcuts wrap the most common actions. You never call them by tool name directly — you trigger them with `/sam` plus plain English, or just by asking in plain language.
| Want to… | Tool | What it does |
|---|---|---|
| Catch up | catchup | Recap of the project — latest entries plus how many tasks are still open. |
| See what's open | open | Lists the active (open) tasks, each with its ID. |
| Log a decision | log | Records a decision fast; the title is auto-derived from the text if you omit it. |
Two ways to invoke — both work:
/sam catch me up
/sam what's open
/sam log we're switching local storage to SQLiteYou type /sam followed by plain English. There is no standalone /catchup, /open, or /log command — it is always /sam plus what you want.
use samskriti-project to catch me up
use samskriti-project to show what's open
use samskriti-project to log: we're switching local storage to SQLiteTool B reads back the decision tool A just wrote — no re-explaining.
<img width="2880" height="1800" alt="Image" src="https://github.com/user-attachments/assets/514bcdc0-4219-4987-bf3b-9fe273b1728e" />
<img width="2880" height="1800" alt="Image" src="https://github.com/user-attachments/assets/3e862787-0809-40f5-af33-742fc5a48050" />
100% local. No cloud, no account, your data never leaves your machine. State is stored in a SQLite database under ~/.samskriti/ (override with the SAMSKRITI_HOME or SAMSKRITI_PROJECT_DB environment variable). Your AI client's own data and privacy policies still apply.
Early / validating. This is a working prototype being tested with real workflows. Bugs, rough edges, and missing features are expected — issues and feedback are very welcome.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.