Act Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Act Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP stdio server exposing three tools for running GitHub Actions locally via act.
act must be installed and in PATH:
# macOS
brew install act
# Linux
curl https://raw.githubusercontent.com/nektos/act/master/install.sh | sudo bashlist_workflowsGlobs .github/workflows/*.yml and returns job names from each file.
| Field | Type | Description |
|---|---|---|
cwd | string? | Repo root (default: process.cwd()) |
Returns: Array<{ file: string, jobs: string[] }>
run_jobSpawns act -j <jobName>, captures stdout+stderr, caches logs.
| Field | Type | Description |
|---|---|---|
jobName | string | Job ID (key under jobs: in the YAML) |
cwd | string? | Repo root (default: process.cwd()) |
Returns: { exitCode: number, logs: string }
get_logsReturns logs cached by the most recent run_job call.
Returns: { logs: string | null }
list_workflows → pick failing job
run_job → read exitCode + logs
get_logs → inspect failure output
(patch YAML)
run_job → verify fix{
"mcpServers": {
"act-mcp": {
"command": "npx",
"args": ["act-mcp"]
}
}
}Or point cwd at a specific repo:
{
"mcpServers": {
"act-mcp": {
"command": "npx",
"args": ["act-mcp"],
"env": {}
}
}
}Pass cwd as a tool argument at call time:
{ "name": "list_workflows", "arguments": { "cwd": "/path/to/repo" } }npm install
npm run build # tsc → dist/
npm test # vitest (uses mock act binary, no act required)
npm run dev # run via tsx without building| Variable | Default | Description |
|---|---|---|
ACT_BIN | act | Path to the act binary (useful for testing) |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.