Rag App Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Rag App Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Start the QDrant container
docker run -p 6333:6333 -p 6334:6334 -v qdrant_storage:/qdrant/storage:z qdrant/qdrantOpen a free account in brightdata and setup a user-email and password. You will need this inside the server2.py.
Clone the repo and open it in cursor IDE. Then go to settings > Cursor settings > MCP Servers. Click on 'Add new MCP server' and add the following code (assuming you have no other server running) to mcp.json.
__To know the location of 'uv'__
which uv or where uv%USERPROFILE%/.local/bin/uv, where %USERPROFILE% resolves to something like c:\Users\username.{
"mcpServers": {
"mcpRAG": {
"command": "path/to/uv",
"args": [
"--directory",
"absolute/path/to/projectdir",
"run",
"server2.py"
]
}
}
}It should show the status in green and display the tools: f1_faq_search_tool and bright_data_web_search_tool.
You can now open the chat in cursor (Ctrl + L) and ask questions.
rag2.ipynb (run the cell that creates f1_faq_collection and stores embeddings), or run the test script below.faq_retrieval_tool and bright_data_web_search_tool.faq_retrieval_tool to get context from your RAG and answer. For non‑F1 topics it may use bright_data_web_search_tool (requires Bright Data credentials in .env).From the project directory run:
uv run test_rag_mcp.pyThis creates f1_faq_collection if needed, then runs a sample FAQ query and prints the retrieved context so you can verify the RAG pipeline without opening Cursor.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.