Smart Thinking — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Smart Thinking (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Help your AI check its work.
Smart-Thinking connects your usual AI assistant to tools for checking calculations, finding supporting passages and testing code. Ask in ordinary language; your assistant prepares the check and explains the result.
This package is the small MCP client. MCP is the protocol assistants use to connect to tools. The checking engine runs on the hosted service. You do not need to install a database, run the engine or supply a personal token for public access.
You need Node.js 22.16 or newer and Internet access. For an assistant that accepts a mcpServers configuration, add:
{
"mcpServers": {
"smart-thinking": {
"command": "npx",
"args": ["-y", "[email protected]"]
}
}
}Save the configuration and reload the MCP connection in your assistant. VS Code uses a different format. Follow the application-specific connection guides for Codex, Claude, Cursor, VS Code or direct HTTP access.
To diagnose a connection from your terminal:
npx -y [email protected] --doctor --allow-networkThe diagnostic checks connectivity and tool discovery. Provider availability is reported separately.
See eighteen explained examples for sources and code, too.
Requests go to the hosted service. Search and semantic checks can use external providers; submitted code files run in a separate sandbox. The client does not scan your disk. Dossiers and results are stored server-side. Keep anonymous dossier identifiers private: they include access capabilities.
Public access has shared quotas. An exact calculation checks the supplied expression; passing tests cover the executed suite. Model reviews remain fallible. Code review has an internal qualification for bounded, explicit requirements. It can cover the declared semantic review when its evidence and qualification remain valid. This is not external accreditation or a correctness guarantee.
Read the data and trust guide, documentation and evaluations. The website is available in French and English.
MIT license. Source and issues.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.