Govuk Frontend Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Govuk Frontend Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
TypeScript MCP server that serves locally-crawled GOV.UK Design System guidance from SQLite FTS5.
data/govuk-design-system.db.search(query: string)fetch(id: string)version()bun install
cp .env.example .envbun run crawlbun run startThe server uses STDIO transport, so most MCP-compatible tools can run it with a command.
Use this command in your MCP client configuration:
bun run /absolute/path/to/govuk-frontend-mcp/src/index.tsIf your client supports separate command and args, use:
bun["run", "/absolute/path/to/govuk-frontend-mcp/src/index.ts"]/absolute/path/to/govuk-frontend-mcp{
"mcpServers": {
"govuk-design-system": {
"command": "bun",
"args": [
"run",
"/absolute/path/to/govuk-frontend-mcp/src/index.ts"
],
"cwd": "/absolute/path/to/govuk-frontend-mcp"
}
}
}∏
"mcpServers": {
"govuk-design-system": {
"type": "stdio",
"command": "bun",
"args": [
"run",
"/absolute/path/to/govuk-frontend-mcp/src/index.ts"
],
"cwd": "/absolute/path/to/govuk-frontend-mcp"
}
}
}docker compose run --rm govuk-design-system-mcp bun run src/index.tsAfter connecting, the MCP should expose:
search(query: string)fetch(id: string)version()Tip: run bun run crawl whenever you want to refresh the local GOV.UK data before using the MCP in your tool.
docker compose up --buildbun test
bun run typecheck~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.