Parental Control — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Parental Control (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill teaches Claude how to use the parental-control MCP server in agent sessions.
The parental-control MCP server wraps Claude sessions used by children, providing:
Add to your Claude Desktop config:
{
"mcpServers": {
"parental-control": {
"command": "npx",
"args": ["-y", "@gonzih/parental-control"],
"env": {
"PARENTAL_CONTROL_CHILD_NAME": "Alex",
"PARENTAL_CONTROL_CHILD_AGE": "14",
"TELEGRAM_BOT_TOKEN": "your-bot-token",
"TELEGRAM_PARENT_CHAT_ID": "your-chat-id"
}
}
}
}check_message(content="<message>", role="assistant")If decision is allow or notify → send normally. If decision is hold_for_approval → wait for parent approval. If decision is block → use safeDeflection text instead.
check_message(content="<child message>", role="user")
log_interaction(role="user", content="<child message>")get_risk_summary()list_pending()
resolve_approval(approvalId="<id>", decision="approve")/approve and /deny commands automaticallyupdate_profile~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.