Volken Hello World — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Volken Hello World (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A minimal MCP server you can deploy to Volken in about five minutes. It exposes three trivial tools so you can see the whole loop end to end: deploy from GitHub, connect an AI client, watch the calls land.
| Tool | Does |
|---|---|
echo | Returns the message you send it |
add | Adds two numbers |
current_time | Returns the current time as ISO 8601 |
The server speaks the MCP Streamable HTTP transport at the root path and listens on the port Volken provides in PORT (it falls back to 8080 locally).
You need Node.js 20+, a GitHub account, and an AI client (Claude Desktop, Claude Code, or Cursor).
npm install -g volken
volken login volken init
volken deployvolken init detects the runtime and writes your volken.toml. volken deploy builds from your repository and prints your endpoint and a gateway token.
volken connect --install --token <your-token>Restart the client, then ask it to "add 2 and 3" or "what time is it".
volken calls --tailvolken devThis runs the server in the MCP Inspector so you can call the tools from a browser before you deploy.
Each tool is a server.registerTool(name, config, handler) call in src/index.ts. Copy one, give it a name, an input schema, and a handler, then redeploy.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.