service-ops — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited service-ops (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
uv run imas-codex graph start # Start (auto-detects SLURM/SSH/local)
uv run imas-codex graph stop # Stop
uv run imas-codex graph status # Check status
uv run imas-codex graph shell # Interactive Cypher shell
uv run imas-codex graph profiles # List all profiles and ports
uv run imas-codex graph export # Export graph archive
uv run imas-codex graph load <f> # Load archive
uv run imas-codex graph pull # Pull latest from GHCR
uv run imas-codex graph backup # Create neo4j-admin dump
uv run imas-codex graph clear # Clear graph (auto-backup first)| Location | Bolt | HTTP |
|---|---|---|
| iter | 7687 | 7474 |
| tcv | 7688 | 7475 |
| jt-60sa | 7689 | 7476 |
write.lock files — corrupts vector indexesDETACH DELETE without confirmationNOT (x IN [...]) instead of x NOT IN [...] (Cypher 5 syntax)uv run imas-codex embed start # Start via SLURM
uv run imas-codex embed start -g 2 # Start with 2 GPUs
uv run imas-codex embed start -f # Foreground (debugging/inside SLURM batch)
uv run imas-codex embed stop # Stop SLURM job + cleanup rogues
uv run imas-codex embed restart # Stop + start
uv run imas-codex embed status # Health + SLURM job + node state
uv run imas-codex embed logs # View SLURM logs
uv run imas-codex embed service install # Install systemd serviceQwen/Qwen3-Embedding-0.6B (dimension: 256)slurm/codex-embed.sh| Symptom | Fix |
|---|---|
embed status shows node draining | Ask admin to resume node |
| Server healthy but no SLURM job | imas-codex embed stop kills rogues |
| Embedding calls timeout | Check tunnel: lsof -i :18765 |
| Rapid FAILED jobs | Check imas-codex embed logs, run uv sync on node |
uv run imas-codex llm start # Start LiteLLM proxy
uv run imas-codex llm stop # Stop
uv run imas-codex llm restart # Restart
uv run imas-codex llm status # Check status
uv run imas-codex llm spend # Cost tracking
uv run imas-codex llm logs # View logssn generate and sn benchmark require the LLM proxy to be running. Model names must use the openrouter/ prefix (e.g. openrouter/anthropic/claude-sonnet-4-5) to preserve cache_control blocks — prompt caching is handled provider-side by OpenRouter, not by this codebase.
uv run imas-codex tunnel start iter # Start SSH tunnel to remote host
uv run imas-codex tunnel stop # Stop tunnel
uv run imas-codex tunnel status # Show active tunnelsuv run imas-codex hpc status # Active SLURM allocations
uv run imas-codex hpc shell # Interactive compute shell
uv run imas-codex hpc run <cmd> # Execute on compute node
uv run imas-codex hpc submit <script> # Submit batch job
uv run imas-codex hpc attach <jobid> # Attach to running job
uv run imas-codex hpc cancel <jobid> # Cancel job
uv run imas-codex hpc info <jobid> # Job detailsuv run imas-codex serve # Full mode (all tools)
uv run imas-codex serve --read-only # Search/read only
uv run imas-codex serve --dd-only --transport streamable-http # DD-only container
uv run imas-codex serve --transport stdio # For MCP clientssqueue -u $USER~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.