manifest — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited manifest (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Follow these steps in order. Do not skip ahead.
observability-engineer instead)Stop the gateway first to avoid hot-reload issues during configuration.
claude gateway stopclaude plugins install manifestIf it fails, check that the CLI is installed and available in the PATH.
Ask the user:
To connect your agent, you need a Manifest API key. Here's how to get one:
>
1. Go to https://app.manifest.build and create an account (or sign in) 2. Once logged in, click "Connect Agent" to create a new agent 3. Copy the API key that starts with mnfst_ 4. Paste it hereWait for a key starting with mnfst_. If the key doesn't match, tell the user the format looks incorrect and ask them to try again.
claude config set plugins.entries.manifest.config.apiKey "USER_API_KEY"Replace USER_API_KEY with the actual key the user provided.
Ask the user if they have a custom endpoint. If not, the default (https://app.manifest.build/api/v1/otlp) is used automatically. If they do:
claude config set plugins.entries.manifest.config.endpoint "USER_ENDPOINT"claude gateway installWait 3 seconds for the gateway to fully start, then check the logs:
grep "manifest" ~/.claude/logs/gateway.log | tail -5Look for:
[manifest] Observability pipeline activeIf it appears, tell the user setup is complete. If not, check the error messages and troubleshoot.
mnfst_ prefix) before writing to config| Error | Fix |
|---|---|
| Missing apiKey | Re-run step 4 |
| Invalid apiKey format | The key must start with mnfst_ |
| Connection refused | The endpoint is unreachable. Check the URL or ask if they self-host |
| Duplicate OTel registration | Disable the conflicting built-in plugin: claude plugins disable diagnostics-otel |
Use @manifest to set up observability for my agent.Use @manifest to connect my agent to my self-hosted Manifest instance at https://manifest.internal.company.com/api/v1/otlpmnfst_ — any other format is invalid~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.