create — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are scaffolding a new project using the Starter Series templates via the create-starter MCP server.
The create-starter MCP server exposes two tools. Use them directly — do not shell out to curl, tar, or git clone.
list_templates — returns the full template table as JSON.create_project — scaffolds a new project.list_templates and ask the user to pick one.name (required) — project name. Must match ^[A-Za-z0-9][A-Za-z0-9_-]*$ (alnum start, then [A-Za-z0-9_-] only). No dots, no spaces, no path separators.description (optional) — one-line description that replaces the template default.output_dir (optional) — where to create the project. Defaults to ./<name> relative to the MCP server's cwd.git init.cd-then-install sequence tuned to the template).| ID | Name | Category |
|---|---|---|
mcp-server | MCP Server (TypeScript) | mcp |
mcp-server-python | MCP Server (Python) | mcp |
npm-package | npm Package | package |
discord-bot | Discord Bot | bot |
telegram-bot | Telegram Bot | bot |
browser-extension | Browser Extension (MV3) | extension |
vscode-extension | VS Code Extension | extension |
electron-app | Electron App | app |
react-native | React Native (Expo) | app |
cloudflare-pages | Cloudflare Pages | deploy |
docker-deploy | Docker Deploy (language-agnostic) | deploy |
Call list_templates for the authoritative, up-to-date list with full metadata.
list_templates or present in the table above.create_project.isError: true response, surface the message verbatim and stop; do not retry with a different name unless the user asks..env.example if the output mentions environment variables, and remind the user that git init has already run — they just need to add a remote.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.