run-pinrag-local-mcp-tool — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited run-pinrag-local-mcp-tool (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
add_document_tool, query_tool, list_documents_tool, remove_document_tool.python -c, ad-hoc scripts, LangChain/Chroma calls, or pinrag/uv run in the terminal) unless the user explicitly asks for scripts, debugging, or automation outside the editor MCP.PINRAG_PERSIST_DIR are wired through the MCP server process.Cursor exposes one server id per `mcp.json` entry. The id you pass to call_mcp_tool is:
`user-` + the exact key of that entry in ~/.cursor/mcp.json (hyphens preserved).
Examples:
Typical mcp.json key | call_mcp_tool server value |
|---|---|
pinrag-dev | user-pinrag-dev |
io-github-ndjordjevic-pinrag | user-io-github-ndjordjevic-pinrag |
pinrag-pypi-from-link | user-pinrag-pypi-from-link |
Discovery (pick one):
mcps/user-*/tools/ that contain `add_document_tool.json`. The folder name (e.g. user-io-github-ndjordjevic-pinrag) is the server string for call_mcp_tool.command/args run PinRAG (pinrag, uvx with args containing --refresh and pinrag, or uv run … pinrag). Each top-level key under mcpServers maps to user-<that-key>.If several PinRAG servers appear:
user-… id.Before the first call: Read the tool descriptor JSON under mcps/<server>/tools/<tool>.json for required parameters (per MCP instructions).
| Tool | When |
|---|---|
add_document_tool | Index local paths (PDF, dirs, Discord export), or pass URLs (YouTube, GitHub). `paths`: list of strings (use absolute paths for files). Optional `tags`: one per path. |
query_tool | Questions over the index. Optional: tag, document_id, page_min/page_max, document_type, response_style. |
list_documents_tool | What’s indexed; optional tag. |
remove_document_tool | Remove by document_id from listing. |
/path/to/book.pdf” → add_document_tool with {"paths": ["/path/to/book.pdf"]} (and optional tags).query_tool with {"query": "…"} (add document_id or tag if they want scope).If the user uses PinRAG Cloud or another URL-based MCP, that is a different MCP server name and may use the same tool names—still use `call_mcp_tool`, not Python; read that server’s folder under mcps/.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.