msds-safety-check — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited msds-safety-check (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Chemical safety intelligence powered by MSDS Chain. Provides compatibility checks, PPE recommendations, storage guidance, regulatory compliance, and signed audit reports for lab workflows.
Automatically triggered when the user's message contains:
Manually triggered via /msds-safety-check for full guided audit.
This skill orchestrates MSDS Chain's 25 MCP tools. It requires the msds-chain MCP server to be configured. If not configured, it will guide the user through setup (see rules/setup-guide.md).
/msds-safety-check) — Guide the user through chemical input, check type selection, and produce a detailed report. Two workflows:Output adapts to context — concise for auto-detect, detailed for manual audit. See rules/output-formats.md.
batch_safety_check for multi-chemical triage (e.g. a protocol's chemical list): one round-trip for pairwise compatibility + per-chemical risk warnings; then drill into the pairs that matter with ask_chemical_safety. Don't make batch_safety_check the only call for a safety question. It does NOT cover PPE or storage grouping — call get_ppe_recommendation / get_storage_guidance when the user needs those.get_emergency_response, check_mixing_order, or get_chemical_alternatives when the user asks follow-up questions.create_audit_session, get_audit_report, upload_msds_pdf) require an API key. Prompt for registration only when the user requests audit functionality, not during basic queries.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.