mcp-engine-bootstrap — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mcp-engine-bootstrap (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Session setup and recovery for SemanticOps MCP. Use the bundled references as the working documentation.
manage_model_connection { "operation": "get_current" }.{ "operation": "list" }, present the choices, then { "operation": "select", "model_id": "<model_id>" } with the user's pick. Service: { "operation": "authenticate", "source": "service" } first when needed, then { "operation": "list_workspaces" } for the workspace choice, then { "operation": "list", "source": "service", "workspace": "<workspace>" } to list its datasets, and finally select with the returned model_id (workspaces themselves are not selectable).manage_preferences { "action": "list", "resource": "rendered" } and apply them within their stated trust boundary.list_model (list, search, analyze, info, report) for discovery, search, previews, and metadata inspection.run_query (execute, analyze, vertipaq, test_access) for DAX execution, performance analysis, storage inspection, and RLS checks.manage_schema, manage_semantic, manage_security) only after the target object and operation are explicit.mcp-engine-query; slow queries → mcp-engine-dax-performance; wrong values → mcp-engine-dax-debugging; tables, columns, relationships, partitions → mcp-engine-schema-authoring; measures and calc groups → mcp-engine-semantic-authoring; multi-object refactors → mcp-engine-refactoring; tests, checkpoints, rollback → mcp-engine-testing-changes; RLS, policy, masking, audit → mcp-engine-security-governance. If a named skill is not installed, continue with the tool's inputSchema or ask the user to add it.transaction, dry_run, include_items, and include_details as top-level request controls.spec values inside each item; items do not inherit from the request.{ "operation": "get_current" }, then { "operation": "reload" } after external model changes.list_model { "operation": "search", "spec": { "query": "<object name>", "mode": "name" } } (spec.query is required) before concluding it does not exist.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.