Dynamic context loading for AI assistants with TDD workflow and AST analysis
SaferSkills independently audited stackguide-mcp (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Dynamic context + active engineering workflow for AI coding assistants in Cursor, VS Code, and other MCP clients.
@stackguide/mcp-server helps teams standardize implementation quality with:
intake, plan, verify, release)MAIN DESCRIPTION templatesThis server is built for real team usage, not just prompt templates.
agent tool (execution-first workflow).init now generates .stackguide/config.json automatically.test/lint/build execution..stackguide artifacts removed from version control.cursor/mcp.json~/.cursor/mcp.json{
"mcpServers": {
"stackguide": {
"command": "npx",
"args": ["-y", "@stackguide/mcp-server@latest"]
}
}
}Settings | Tools | AI Assistant | Model Context Protocol (MCP).{
"mcpServers": {
"stackguide": {
"command": "npx",
"args": ["-y", "@stackguide/mcp-server@latest"]
}
}
}.vscode/mcp.jsonservers as root key.{
"servers": {
"stackguide": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@stackguide/mcp-server@latest"]
}
}
}%USERPROFILE%\\.mcp.json (global)<solution>\\.mcp.json (repo-scoped)<solution>\\.vs\\mcp.json (solution/user-scoped)servers as root key.{
"servers": {
"stackguide": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@stackguide/mcp-server@latest"]
}
}
}setup to detect project context.init action:"full" to scaffold .stackguide/ and defaults.agent actions (intake, create_ticket, plan, verify, release) for delivery flow.setup type:"react-typescript" enableAdaptiveTdd:true model:"gpt-5" integrations:["jira","github"] tokenMode:"compact"
init action:"full" model:"gpt-5" tokenMode:"compact" integrations:["jira","github"] mcpSyncTargets:["cursor","root"] applyMcpTemplates:trueinit action:"status"
agent action:"status"agent action:"intake" ticket:"PROJ-123"
agent action:"create_ticket" mainDescription:"<MAIN DESCRIPTION>" projectKey:"PROJ"
agent action:"plan" brief:"<brief-from-intake>"
agent action:"verify"
agent action:"release" version:"v1.2.0"setup: configure StackGuide context for project typecontext: show currently loaded contextrules: list/search/get/select rule setsknowledge: list/search/get knowledge filesreview: analyze files/URLs/project code qualitycursor: browse/import community rulesdocs: fetch/search/list documentationconfig: save/load/export/import configurationscustom_rule: create/update/delete/list project custom ruleshelp: usage help by topicgenerate: boilerplate generation (component/hook/service/test/api/model/util)health: project health score and recommendationsanalyze: project intelligence (structure/config/dependency/generate/apply)workflow: lazy-load raw workflow assets (agents/skills/hooks/commands)init: scaffold .stackguide with stack-aware defaultsagent: active workflow executor (status, intake, create_ticket, plan, verify, release)agent action:"intake"createFromDescription:true)agent action:"create_ticket"MAIN DESCRIPTION format.stackguide/config.json (projectKey, issueType)summary from first line of MAIN DESCRIPTION when omittedagent action:"plan"agent action:"verify"agent action:"release"major / minor / patch)init generates:
.stackguide/config.json (project workflow config)Runtime/local artifacts:
.stackguide/analysis-cache.json.stackguide/health-history.jsonThese are machine-local and must not be committed.
pnpm lint includes:
pnpm run guard:repoThe guard fails if .stackguide artifacts are tracked.
Cache/history persistence includes:
STACKGUIDE_INTEGRITY_KEY=<long-random-secret>For teams, configure STACKGUIDE_INTEGRITY_KEY in local/dev and CI environments for stronger tamper resistance.
python-django, python-fastapi, python-flask, react-node, react-typescript, vue-node, nextjs, express, nestjs, laravel, rails, golang, rust, custom.
Use pnpm for all commands.
pnpm install
pnpm lint
pnpm test
pnpm build
pnpm dev4.1.2+3.0.0 up to 4.1.1 are deprecated in npm due to local artifact hygiene issues.4.x release in all environments.@stackguide/mcp-serverio.github.isucorp-taimiralain/stackguide-mcpGPL-3.0
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.