Groundlens Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Groundlens Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Moved. The GroundLens MCP server ships inside the groundlens package. This repository is archived, and the groundlens-mcp package on PyPI installs nothing but a message that says so.
pip install "groundlens[mcp]"
groundlens-mcp{ "mcpServers": { "groundlens": { "command": "groundlens-mcp" } } }With nothing installed, through uv:
{
"mcpServers": {
"groundlens": {
"command": "uvx",
"args": ["--from", "groundlens[mcp]", "groundlens-mcp"]
}
}
}Keep --from "groundlens[mcp]": a bare uvx groundlens-mcp installs this old package instead of the server.
The server has three tools: verify_answer, verify_run and verify_records. GroundLens is guardrails for LLM answers: it checks an LLM answer against its sources without a model, decides PASS, REVIEW or FAIL under your policy, and keeps a signed record.
io.github.groundlens-dev/groundlensApache-2.0.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.