vector-setup — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited vector-setup (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Bootstraps [email protected] and its optional add-ons so every /vector subcommand actually works on first run.
Out of the box, several /vector subcommands fail with a confusing dep error:
| Error | Missing package |
|---|---|
ONNX WASM files not bundled. The onnx/ directory is missing. | ruvector-onnx-embeddings-wasm |
Brain commands require @ruvector/pi-brain | @ruvector/pi-brain |
SONA not available. Native error: Cannot find module '/.../@ruvector/sona/index.js' | @ruvector/ruvllm (JS fallback) |
LLM commands require @ruvector/ruvllm | @ruvector/ruvllm |
This skill installs them in one pass.
npm install [email protected] npm install ruvector-onnx-embeddings-wasm \
@ruvector/pi-brain \
@ruvector/ruvllmFor a leaner install, pass --full to also pull @ruvector/graph-node and @ruvector/router:
npm install ruvector-onnx-embeddings-wasm \
@ruvector/pi-brain \
@ruvector/ruvllm \
@ruvector/graph-node \
@ruvector/router npx -y [email protected] doctor
npx -y [email protected] info claude mcp add ruvector -- npx -y [email protected] mcp start
claude mcp list | grep ruvector npx -y [email protected] hooks route "test"
npx -y [email protected] attention list
npx -y [email protected] rvf examples npx -y [email protected] identity generate
npx -y [email protected] identity showFor a deterministic verification of the install, run the plugin's bundled smoke script:
bash plugins/ruflo-ruvector/scripts/smoke.shIt checks: version pin, top-level subcommand visibility, hooks ast-analyze, hooks route, attention list, rvf examples, and info. Exits non-zero if any drift from the contracted surface is detected.
@ruvector/core)@ruvector/sona native binding (the JS fallback via @ruvector/ruvllm is sufficient on macOS arm64; Linux x64 has its own native binding)If doctor still reports a problem after this skill runs, paste its output verbatim and ask.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.