laviya-orchestrator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited laviya-orchestrator (Rules) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Laviya Agent Skills is a repository of reusable orchestration assets for IDE and agent integrations. It provides a production-oriented MCP runtime, shared orchestration prompt assets, and client-specific artifacts for tools such as Cursor and Claude.
laviya-agent-skills: reusable prompt, rule, and skill asset bundle for Node-based toolinglaviya-mcp-server: stdio MCP runtime published from mcp/core/: shared orchestration prompt assetsmcp/: TypeScript MCP runtime scaffold (laviya-mcp-server)cursor/: Cursor rule artifactsclaude/: Claude skill artifacts (SKILL.md for orchestration, laviya-delivery-cycle/SKILL.md for the user-driven delivery cycle)docs/: setup, npm publishing, and end-user onboarding guideslaviya-agent-skills/
core/
mcp/
src/
examples/
README.md
cursor/
claude/
docs/
Setup.md
MCPServerPublish.md
InstallationAndUsage.mdcd mcp
npm install
npm run typecheck
npm run build
npm run devRequired environment variable:
LAVIYA_API_KEYClaude Code loads a skill only from a skills folder, one folder per skill named after the skill, with the file named SKILL.md:
| Skill | Source file in this repository | Install to (personal, all projects) | Or (one project only) |
|---|---|---|---|
laviya-orchestrator (orchestration runs) | mcp/examples/claude/SKILL.md | ~/.claude/skills/laviya-orchestrator/SKILL.md | <project>/.claude/skills/laviya-orchestrator/SKILL.md |
laviya-delivery-cycle (verify a work list, create tasks, report Ready for deploy) | claude/laviya-delivery-cycle/SKILL.md | ~/.claude/skills/laviya-delivery-cycle/SKILL.md | <project>/.claude/skills/laviya-delivery-cycle/SKILL.md |
The paths in the second column are where the files live in this repository, not where Claude Code looks for them. A file in ~/.claude/laviya-delivery-cycle/ (without skills) or directly in ~/.claude/ is ignored.
Windows (PowerShell, from the repository root):
New-Item -ItemType Directory -Force "$HOME\.claude\skills\laviya-orchestrator", "$HOME\.claude\skills\laviya-delivery-cycle" | Out-Null
Copy-Item mcp\examples\claude\SKILL.md "$HOME\.claude\skills\laviya-orchestrator\SKILL.md"
Copy-Item claude\laviya-delivery-cycle\SKILL.md "$HOME\.claude\skills\laviya-delivery-cycle\SKILL.md"macOS / Linux (from the repository root):
mkdir -p ~/.claude/skills/laviya-orchestrator ~/.claude/skills/laviya-delivery-cycle
cp mcp/examples/claude/SKILL.md ~/.claude/skills/laviya-orchestrator/SKILL.md
cp claude/laviya-delivery-cycle/SKILL.md ~/.claude/skills/laviya-delivery-cycle/SKILL.mdCheck: start a new Claude Code session and run /skills; laviya-orchestrator and laviya-delivery-cycle must be listed. Copy the files again after updating this repository. The Laviya MCP tools also work without the skills; the skills add the step-by-step rules.
Install the reusable asset bundle:
npm install laviya-agent-skillsExample usage:
import { assets, resolveAssetPath } from "laviya-agent-skills";
import { readFileSync } from "node:fs";
const cursorRule = readFileSync(assets.cursorRule, "utf8");
const orchestratorPrompt = readFileSync(resolveAssetPath("orchestratorSystemPrompt"), "utf8");mcp/README.mddocs/Setup.mddocs/MCPServerPublish.mddocs/InstallationAndUsage.mddocs/InstallationAndUsage.mdThe MCP runtime follows a global-runtime plus project-local-config model:
.laviya/project.json or .laviya.json)Current MCP tool set includes both orchestration and local-direct task feed flows:
laviya_helplaviya_feed_tasklaviya_get_local_work_statuslaviya_cancel_local_worklaviya_add_task_commentlaviya_list_projectslaviya_create_taskslaviya_start_delivery_runlaviya_get_tasklaviya_upload_task_filelaviya_update_task_descriptionlaviya_assign_tasklaviya_start_task_worklaviya_complete_task_worklaviya_get_my_worklaviya_start_executionlaviya_complete_executionlaviya_report_token_usagelaviya_diagnosticsAll tools return API envelope JSON text in the shape: { HasFailed, Messages, Data }.
Work items may include a backend-defined ExecutionPolicy. Analysis and review policies are read-only: agents must not implement changes, and enforced policies require a truthful completion executionEvidence.
For full architecture details and file-level scaffolding, refer to mcp/README.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.