vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Laviya Agent Skills is a repository of reusable orchestration assets for IDE and agent integrations. It provides a production-oriented MCP runtime, shared orchestration prompt assets, and client-specific artifacts for tools such as Cursor and Claude.
laviya-agent-skills: reusable prompt, rule, and skill asset bundle for Node-based toolinglaviya-mcp-server: stdio MCP runtime published from mcp/core/: shared orchestration prompt assetsmcp/: TypeScript MCP runtime scaffold (laviya-mcp-server)cursor/: Cursor rule artifactsclaude/: Claude skill artifactsdocs/: setup, npm publishing, and end-user onboarding guideslaviya-agent-skills/
core/
mcp/
src/
examples/
README.md
cursor/
claude/
docs/
Setup.md
MCPServerPublish.md
InstallationAndUsage.mdcd mcp
npm install
npm run typecheck
npm run build
npm run devRequired environment variable:
LAVIYA_API_KEYInstall the reusable asset bundle:
npm install laviya-agent-skillsExample usage:
import { assets, resolveAssetPath } from "laviya-agent-skills";
import { readFileSync } from "node:fs";
const cursorRule = readFileSync(assets.cursorRule, "utf8");
const orchestratorPrompt = readFileSync(resolveAssetPath("orchestratorSystemPrompt"), "utf8");mcp/README.mddocs/Setup.mddocs/MCPServerPublish.mddocs/InstallationAndUsage.mddocs/InstallationAndUsage.mdThe MCP runtime follows a global-runtime plus project-local-config model:
.laviya/project.json or .laviya.json)Current MCP tool set includes both orchestration and local-direct task feed flows:
laviya_helplaviya_feed_tasklaviya_get_local_work_statuslaviya_cancel_local_worklaviya_add_task_commentlaviya_get_my_worklaviya_start_executionlaviya_complete_executionlaviya_report_token_usagelaviya_diagnosticsAll tools return API envelope JSON text in the shape: { HasFailed, Messages, Data }.
Work items may include a backend-defined ExecutionPolicy. Analysis and review policies are read-only: agents must not implement changes, and enforced policies require matching completion executionEvidence and summary policyCompliance.
For full architecture details and file-level scaffolding, refer to mcp/README.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.