Sai Roadmap Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Sai Roadmap Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server exposing my certifications, projects, and AI engineering roadmap as callable tools — including a semantic search engine built entirely from scratch: no pretrained models, no external embedding API, no high-level ML framework.
Built on the official @modelcontextprotocol/sdk (v1.29.0), stdio transport, with a Python/NumPy subprocess powering the ML tool.
| Tool | Description | Optional Input |
|---|---|---|
get_profile | Basic profile info | — |
get_certifications | Certifications, filterable by skill | skill: string |
get_projects | Portfolio projects, filterable by tech stack | tech: string |
get_roadmap | 2026 learning roadmap, filterable by quarter | quarter: "Q1"–"Q4" |
semantic_search | Real semantic retrieval, not keyword matching | query: string, top_n: number |
Pipeline (full implementation in src/ml/lsa.py):
src/ml/corpus.py) — 51 natural-language sentences generated from certifications, detailed project descriptions, and roadmap entries.word2phrase tool. Merges tightly-bound word pairs (machine_learning, medireach_ai, artificial_intelligence) into single tokens before training.numpy.linalg.svd, manually truncated to the top-k singular vectors (the actual Latent Semantic Analysis step — not sklearn.fit_transform()).Bigram threshold, take one: my first PMI threshold (min_count=2, threshold=3.0) merged 147 bigrams — almost all of them grammatical glue like of_the, by_google, is_a, not real phrases. The bug: with only 51 sentences, raw PMI is noisy, and stopwords weren't excluded from forming pairs. Fixed by excluding stopwords from bigram formation and raising the bar to min_count=3, threshold=15.0 — now produces 19 bigrams, and every single one is a genuine phrase (machine_learning, google_cloud, vibe_coding, iit_bombay).
Query/training vocabulary mismatch: after adding bigram merging, queries were still being tokenized with plain word-splitting — so a query like "machine learning" stayed as two tokens while the trained vocabulary only had the merged machine_learning. Silent mismatch, no error thrown, just quietly worse retrieval. Fixed by persisting the learned merge set alongside the model and applying it identically at query time (apply_bigram_merges() in corpus.py).
Most small ML side-projects show a few queries that "look like they work." src/ml/evaluate.py instead defines 10 hand-labeled queries with explicit relevance judgments and reports precision@k:
Query P@1 P@3 P@5
----------------------------------------------------------------------
python certifications 1.00 1.00 0.80
cloud computing certifications 1.00 0.67 0.40
multi agent healthcare assistant 1.00 1.00 1.00
edtech platform for students 1.00 1.00 1.00
frontend animation and design 0.00 0.00 0.00
hackathon and competition experience 0.00 0.00 0.00
SQL and database skills 0.00 0.00 0.00
generative AI and large language models 1.00 0.67 0.40
deep learning quarter in the roadmap 0.00 0.67 0.40
agentic IDE development tools 1.00 1.00 0.60
----------------------------------------------------------------------
MEAN 0.60 0.60 0.46Three queries scored zero — here's exactly why, diagnosed rather than hand-waved:
"frontend animation and design" → query contains "animation" (singular); the corpus only ever says "animations" (plural). Out-of-vocabulary, no signal. This is the classic bag-of-words weakness — no stemming, no lemmatization."hackathon and competition experience" → same issue: "competition" and "experience" never appear in the corpus at all (it says "Hackathon," not "competition")."SQL and database skills" → no OOV words here, but a genuine ranking failure: idf("skills") == idf("database") (both 3.833) because both happen to appear in exactly one document — IDF can't tell "rare and topically specific" apart from "rare by coincidence" at this corpus size. The word "skills" then drags the ranking toward the wrong (but skills-heavy) document.These are real, well-understood limitations of small-corpus bag-of-words retrieval, not implementation bugs — and documenting them precisely is more useful than a misleadingly clean demo.
I expanded the corpus 3× (17 → 51 sentences) partly to test whether word-level skip-gram (still in src/ml/word2vec.py, Mikolov et al. 2013, negative sampling, full from-scratch NumPy training) would become viable. Honest result: no.
'cloud' -> [('computing', 0.746), ('oac', 0.728), ('analytics', 0.698), ('infrastructure', 0.645)] ← coherent
'python' -> [('generative_ai', 0.684), ('workflow', 0.599), ('sql', 0.595)] ← noise
'agents' -> [('good', 0.687), ('intensive', 0.681), ('5', 0.636)] ← noise"cloud" produces a genuinely sensible neighborhood; "python" and "agents" still don't. 51 sentences is closer to viable than 17 was, but word2vec realistically needs thousands of sentences minimum. LSA remains the correct choice for this corpus size — confirmed by actually re-running the experiment, not just assumed.
git clone https://github.com/saichintamani/sai-roadmap-mcp.git
cd sai-roadmap-mcp
npm install
pip3 install -r requirements.txt --break-system-packages
npm run train # builds corpus, detects bigrams, trains LSA model
npm run evaluate # runs the precision@k evaluation abovenpm startCommunicates over stdio via JSON-RPC 2.0. Ready message goes to stderr; stdout is reserved for protocol messages.
{
"mcpServers": {
"sai-roadmap": {
"command": "node",
"args": ["/absolute/path/to/sai-roadmap-mcp/src/index.js"]
}
}
}claude mcp add sai-roadmap -- node /absolute/path/to/sai-roadmap-mcp/src/index.jssai-roadmap-mcp/
├── src/
│ ├── index.js # MCP server: 5 tools, stdio transport
│ ├── data.json # Structured portfolio data
│ └── ml/
│ ├── corpus.py # Sentence generation + PMI bigram detection
│ ├── word2vec.py # Skip-gram + negative sampling (kept, documented as non-viable here)
│ ├── lsa.py # TF-IDF + truncated SVD -- the model actually used
│ ├── train.py # Trains and saves the model + merge set
│ ├── query.py # CLI query interface, called by index.js
│ ├── evaluate.py # Precision@k evaluation against hand-labeled queries
│ └── lsa_model.npz # Pre-trained weights
├── requirements.txt
├── package.json
└── README.mdMost student AI portfolios show using an LLM API. This shows three different things: understanding of the MCP protocol layer production AI tools run on; a working classical NLP/ML retrieval system built from first principles; and — maybe more importantly — the engineering discipline to measure it, find the failure modes, and document them precisely instead of cherry-picking examples that look good.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.