boost — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited boost (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Enhance the user's prompt using the ClaudeBoost MCP server, then present a choice.
If `$ARGUMENTS` is empty (user just typed `/boost` with nothing after): Display this welcome message:
⚡ **ClaudeBoost** — Prompt Enhancement for Claude Code
---
💡 **Auto-boost is ON** — every task prompt you type is automatically enhanced. You don't need to type `/boost` every time — just type normally!
Example: type `fix the login bug` → ClaudeBoost auto-enhances → you choose the version you want.
---
**Commands:**
| Command | What it does |
|---------|-------------|
| Just type normally | Auto-boosts your prompt |
| `<prompt> --raw` | Skip boost for one prompt |
| `/boost <prompt>` | Manually boost a specific prompt |
| `/boost --login` | Sign in to sync history |
| `/boost --help` | Show full command reference |
| `/boost-settings` | View/change settings |
| `/boost-settings -l light` | Switch to light boost |
| `/boost-settings --auto false` | Turn off auto-boost |STOP here. Do NOT call any MCP tools.
If `$ARGUMENTS` is `--setup` or `setup`: Get the Python path and API key, then register the MCP server:
PYTHON_PATH=$(python3 -c "from claudeboost_mcp.setup import get_python_path; print(get_python_path())")
API_KEY=$(cat ~/.claudeboost/config.env 2>/dev/null | grep ANTHROPIC_API_KEY | cut -d= -f2)Then run:
claude mcp remove claudeboost 2>/dev/null; claude mcp add claudeboost -e "ANTHROPIC_API_KEY=$API_KEY" -- $PYTHON_PATH -m claudeboost_mcpDisplay: ✅ MCP server registered. Restart Claude Code to activate. STOP here.
If `$ARGUMENTS` is `--login` or `login`: Run the login command using Bash:
claudeboost-mcp --loginThis will prompt for email and password directly in the terminal. No browser needed. STOP here after the command completes. Do NOT call any MCP tools.
If `$ARGUMENTS` is `--logout` or `logout`: Delete the auth file using Bash:
rm -f ~/.claudeboost/auth.jsonThen display: ✅ **Logged out of ClaudeBoost.** Run /boost --login to sign in again. STOP here.
If `$ARGUMENTS` is `--status` or `status`: Call the boost_status MCP tool. Display:
⚡ **ClaudeBoost Status**
| | |
|---|---|
| **Account** | {email or "Not signed in"} |
| **User ID** | {user_id or "—"} |
| **Boost Level** | {settings.boost_level} |
| **Auto-Boost** | {settings.auto_boost ? "ON" : "OFF"} |
| **Streak** | {streak.streak}-day · {streak.total_boosts} total |
| **Connected since** | {created_at or "—"} |
{if not authenticated: "Run `/boost --login` to sign in."}STOP here.
If `$ARGUMENTS` is `--help` or `help`: Invoke the /boost-help skill instead. STOP here.
Otherwise (normal boost):
boost_prompt MCP tool with the user's prompt: $ARGUMENTS"skipped": true. If so, display:✅ **Your prompt scores {original_score.total}/30 — already well-structured!**
No boost needed. Strong dimensions: {list strong_dimensions as comma-separated labels}.
Proceeding with your original prompt.Then execute the original prompt directly. Call log_boost with {"original": original, "boosted": original, "domain": domain, "chosen": "skipped"}. STOP.
domain, original, boosted, level, original_score, boosted_score, improvement, and improvements_added⚡ **CLAUDEBOOST** · `{domain}` · Level: `{level}`
📈 **Score: {original_score.total}/30 → {boosted_score.total}/30** (+{improvement})
🔧 **Boost added:** {join improvements_added with ", "}
---
> 📝 **Original:** {original}
---
### ✨ Boosted Prompt
{paste the COMPLETE boosted prompt here — every single line, no truncation}
---
📊 **Score Breakdown:**
| Dimension | Before | After |
|-----------|--------|-------|
| Specificity | {original_score.dimensions.specificity} | {boosted_score.dimensions.specificity} |
| Verification | {original_score.dimensions.verification} | {boosted_score.dimensions.verification} |
| Context | {original_score.dimensions.context} | {boosted_score.dimensions.context} |
| Constraints | {original_score.dimensions.constraints} | {boosted_score.dimensions.constraints} |
| Structure | {original_score.dimensions.structure} | {boosted_score.dimensions.structure} |
| Output | {original_score.dimensions.output_definition} | {boosted_score.dimensions.output_definition} |
---
{if streak.streak > 0: show "🔥 **{streak.streak}-day streak** · {streak.total_boosts} total boosts · {streak.today_boosts} today"}AskUserQuestion with these EXACT settings:log_boost MCP tool with: {"original": original, "boosted": current_boosted, "domain": domain, "chosen": "boosted"}— current_boosted is the LATEST version (may have been refined multiple times) — Do NOT pass the first generated version if it was refined — Do NOT pass original_score/boosted_score — log_boost will re-score the final text
📝 **Type your notes below** (e.g. "use PyTorch instead of sklearn", "change 95% to 90%")log_boost MCP tool with: {"original": original, "boosted": original, "domain": domain, "chosen": "original"}log_boost MCP tool with: {"original": original, "boosted": user_typed_text, "domain": domain, "chosen": "refined"}CRITICAL: Only call `log_boost` ONCE, after the user's FINAL choice. The `boosted` field in `log_boost` must be the FINAL text the user accepted — after ALL refinements, not the first generated version.
/mcp to check status."Do NOT fall back to manual enhancement.
If the MCP tool returns a JSON response with "error": "auth_required", run:
claudeboost-mcp --loginThen display: Run /boost again after signing in. Do NOT enhance manually. Do NOT retry. Wait for the user.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.