Md.Md — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Md.Md (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
md.md is a team intelligence platform that turns internal engineering knowledge into versioned Markdown blocks, then injects the right context into AI-assisted development workflows.
It combines:
AI coding assistants are strong at general coding but weak on team-specific context. Without shared context, teams repeatedly re-explain standards, architecture decisions, and workflows.
md.md solves this by letting teams:
app-backend/: NestJS API for auth, block lifecycle, policy resolution, and observabilityapp-client/: React + Vite dashboard for block authoring, publishing, and resolve previewmcp-server/: Model Context Protocol server that exposes md.md tools over stdioide-integrations/: IDE integration documentation (currently Cursor-focused)docs/: Product vision, phase plan, and resolution model design docsmcp-server toolsA named unit of team knowledge containing one or more Markdown files.
Draft content can be edited freely. Published versions are stable and intended for consumption.
Data and permissions are scoped by team and workspace.
At usage time, the system resolves and composes relevant published blocks into an AI-ready payload.
app-backend)Tech stack:
pg (Supabase-compatible connection)Responsibilities:
Notable backend capabilities:
mdmd_<token>app-client)Tech stack:
Responsibilities:
mcp-server)Tech stack:
@modelcontextprotocol/sdkResponsibilities:
Primary tools include:
resolve_contextattach_blockslist_blocksget_blockhealth_checkcreate_block, update_block, publish_block, etc.)whoami, list_injection_logs)ide-integrations)Contains setup patterns for connecting editors to the MCP server.
Current documented integration:
docs)idea_1.0.md: product rationale and system visionphases_1.0.md: implementation roadmap (phase-oriented)resolution_model.md: detailed target model for selection, ordering, and compositioncd app-backend
npm installCreate app-backend/.env with at least:
SUPABASE_DATABASE_URL=postgresql://<user>:<password>@<host>:<port>/<db>Start backend:
npm run start:devFrom app-backend:
npm run create-admin -- \
--email [email protected] \
--name "Admin User" \
--team team-alpha \
--workspace workspace-coreSave the generated mdmd_... key securely.
cd ../app-client
npm install
npm run devcd ../mcp-server
npm install
npm run build
npm startSet environment variables for MCP runtime (either shell or IDE config):
MD_MD_API_URL=http://localhost:3000
MD_MD_API_KEY=mdmd_your_key_herecd app-backend
npm run start:dev
npm run build
npm run test
npm run test:e2e
npm run lintcd app-client
npm run dev
npm run build
npm run lint
npm run previewcd mcp-server
npm run dev
npm run build
npm startRecent local ignore defaults in mcp-server/.gitignore include:
.mcpregistry_github_token.mcpregistry_registry_tokenImplemented:
In progress or planned:
app-backend/docs/mcp-server/README.mdide-integrations/README.mddocs/See license declarations in each package (app-backend, app-client, mcp-server).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.