Flaim — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Flaim (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Connect your ESPN, Yahoo, and Sleeper leagues, then use Flaim Fantasy in ChatGPT for read-only analysis grounded in your real league. The same MCP service also supports optional manual MCP clients like Claude, Perplexity, and Gemini CLI where their MCP capabilities allow.
Read-only by design. No trades, no drops, no roster changes — just advice.
The Flaim skill teaches your AI assistant how to behave like a fantasy analyst — which data to pull, how to interpret it, and how to turn it into useful advice. The MCP tools feed it your actual league data. Together, they give a general-purpose AI enough structure to answer like it knows your specific league.
.agents/skills/flaim-fantasy/ into your project or home directory (see The Skill below)The Flaim skill teaches your AI assistant how to behave like a fantasy analyst — when to use which tools, how to interpret league data, and how to turn that context into useful advice.
Install for Claude Code (or any Agent Skills-compatible tool):
Place the skill in your project's .agents/skills/ directory (cross-platform convention) or in ~/.agents/skills/ for global use:
# Clone or copy the skill directory
cp -r flaim/.agents/skills/flaim-fantasy ~/.agents/skills/flaim-fantasyThe AI will detect and activate the skill automatically when you ask fantasy questions.
| Tool | What it does |
|---|---|
get_user_session | Your leagues across all platforms |
get_ancient_history | Past seasons and historical leagues outside the current season |
get_league_info | Baseline league context: settings, scoring, roster config, teams/owners |
get_roster | Team roster with player stats |
get_matchups | Weekly matchups and scores |
get_standings | League standings and rankings |
get_free_agents | Available players; ESPN/Yahoo include ownership percentages, Sleeper returns identities only |
get_players | Player lookup; ESPN and Yahoo can add league ownership, Sleeper ownership is unavailable |
get_transactions | Recent adds, drops, waivers, and trades |
All tools connect through a single MCP endpoint: https://api.flaim.app/mcp
| Platform | Sports | Auth |
|---|---|---|
| ESPN | Football, Baseball, Basketball, Hockey | Chrome extension or manual cookies |
| Yahoo | Football, Baseball, Basketball, Hockey | OAuth 2.0 |
| Sleeper | Football, Basketball | Username (public API) |
Chrome Extension → flaim.app → Auth Worker → Supabase
↓
ChatGPT Apps / manual MCP clients → Fantasy MCP Gateway → ESPN/Yahoo/Sleeper Clients → Platform APIsSolo indie project — built with care, maintained for the long term. No VC funding, no growth pressure, just a useful tool for fantasy sports fans who use AI.
git clone https://github.com/jdguggs10/flaim.git
cd flaim
corepack pnpm install
cp web/.env.example web/.env.local # add keys
corepack pnpm run devRoot, web, and workers use pnpm via Corepack. The Chrome extension is intentionally npm-isolated under extension/ with its own lockfile and release flow.
| Document | Description |
|---|---|
| Architecture | System design, deployment, troubleshooting |
| Changelog | Release history |
| Web App | Next.js routes, components, environment |
| Workers | Cloudflare Workers, MCP tools, ESPN API |
| Extension | Chrome extension build, Sync Host, CWS |
Best-effort support — I'll respond when I can.
MIT License — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.