Developer Context Agent — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Developer Context Agent (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Token-efficient, codebase-aware AI agent runtime for TypeScript/Node.js developer workflows.
Developer Context Agent is a reusable backend service that acts as a context router and coding agent for IDEs, CLIs, and automation workflows. It minimizes token waste through:
rg) on PATHcp .env.example .env
npm install
npm run docker:up
npm run db:migrate
npm run devServer runs at http://localhost:3100.
.env:GROQ_API_KEY=gsk_your_key_here
DEFAULT_MODEL=groq:llama-3.3-70b-versatile
PLANNER_MODEL=groq:llama-3.1-8b-instantModels use provider:model format — also supports openai: and anthropic: prefixes.
curl http://localhost:3100/healthcurl -X POST http://localhost:3100/chat \
-H "Content-Type: application/json" \
-H "X-API-Key: dev-key" \
-d '{"prompt":"What does auth do?","repoPath":"/path/to/your/repo"}'curl -X POST http://localhost:3100/runs \
-H "Content-Type: application/json" \
-H "X-API-Key: dev-key" \
-d '{"mode":"find","prompt":"auth middleware bug","repoPath":"/path/to/your/repo"}'| Method | Path | Description |
|---|---|---|
| GET | /health | Liveness + DB/Redis checks |
| GET | /metrics | Token, cache, latency metrics |
| POST | /chat | Lightweight explain mode |
| POST | /runs | Start supervised agent run |
| GET | /runs/:id | Get run state |
| POST | /runs/:id/approve | Approve gated actions |
See docs/IDE_BRIDGE.md for IDE integration contract.
src/
├── app/ # Fastify server + routes
├── core/ # Config, Zod schemas, types
├── orchestrator/ # Run lifecycle, planner, executor, reviewer
├── context/ # Repo map, retrieval, prompt building
├── tools/ # Sandboxed tool registry
├── memory/ # Multi-layer cache + session memory
├── models/ # OpenAI, Anthropic, local compressor
├── observability/ # Logging + metrics
└── mcp/ # MCP server for IDE integrationnpx tsx src/mcp/server.tsTools: start_run, get_run, explain, find_files.
npm testUnit tests run without Docker. Integration tests require Postgres + Redis.
| Variable | Default | Description |
|---|---|---|
PORT | 3100 | HTTP port |
DATABASE_URL | postgres://dca:dca@localhost:5433/developer_context_agent | Postgres |
REDIS_URL | redis://localhost:6379 | Redis |
GROQ_API_KEY | — | Groq API key (recommended for free tier) |
OPENAI_API_KEY | — | OpenAI API key |
ANTHROPIC_API_KEY | — | Anthropic API key |
DEFAULT_MODEL | groq:llama-3.3-70b-versatile | Default model (provider:model) |
PLANNER_MODEL | groq:llama-3.1-8b-instant | Planner model (provider:model) |
API_KEY | — | Optional API auth |
TOKEN_BUDGET_DEFAULT | 32000 | Default token budget |
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.