Ceregrep Client — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ceregrep Client (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 6 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 6 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server that exposes Swarm Scout query capabilities to other agents.
This MCP server allows any MCP-compatible agent (like Claude Desktop) to use Swarm Scout as a tool for querying and analyzing codebases. Instead of the agent manually using bash and grep, it can ask Scout (which has its own LLM-powered analysis) to find context.
npm install -g swarm-scout# No installation needed! Just use uvx to run it
uvx scout-mcppip install scout-mcpcd mcp-server
pip install -e .The easiest way to use scout-mcp is with uvx, which runs the package without installation:
uvx scout-mcpMethod 1: Using Claude MCP CLI (Easiest)
claude mcp add scout uvx scout-mcpThis automatically adds scout-mcp to your Claude configuration.
Method 2: Manual Configuration
Edit your Claude Desktop MCP configuration file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json~/.config/Claude/claude_desktop_config.jsonAdd this configuration:
{
"mcpServers": {
"scout": {
"command": "uvx",
"args": ["scout-mcp"]
}
}
}If you installed via pip:
{
"mcpServers": {
"scout": {
"command": "scout-mcp"
}
}
}For any MCP-compatible client, add to your mcp.json or equivalent config file:
{
"mcpServers": {
"ceregrep": {
"command": "uvx",
"args": ["ceregrep-mcp"],
"env": {}
}
}
}You can even use Scout's own MCP client to connect to this server! Add to .swarmrc:
{
"mcpServers": {
"scout-context": {
"type": "stdio",
"command": "uvx",
"args": ["scout-mcp"]
}
}
}Now Scout can delegate context-finding to another instance of itself!
Query ceregrep to find context in a codebase.
Parameters:
query (required): Natural language querycwd (optional): Working directory to run ceregrep inmodel (optional): LLM model to useverbose (optional): Enable verbose outputExample queries:
All ceregrep agents are automatically exposed as MCP tools! External systems like Claude Code can invoke specialized agents directly.
Available agents:
Parameters (all agents):
prompt (required): The prompt/query to send to the agentcwd (optional): Working directory to run inmodel (optional): LLM model to useverbose (optional): Enable verbose outputExample usage:
agent_debug_agent: "Why is my authentication failing with a 401 error?"agent_context_agent: "Explain the payment processing system architecture"agent_review_agent: "Review the authentication middleware for security issues"Once you've added ceregrep-mcp to Claude Code, you can ask Claude to use specialized agents:
User: "Use the debug-agent to investigate why login is returning 401 errors"
Claude Code: (Sees agent_debug_agent as available tool, invokes it)
The debug agent will:
Response format:
## Debug Agent Response
**Prompt:** Investigate why login is returning 401 errors
I've analyzed your authentication system. Here's what I found:
1. JWT Token Validation (src/auth/middleware.ts:45)
- The token expiration check is failing
- Issue: Clock skew between server and client
2. Suggested Fix:
- Add a 30-second leeway to token validation
- Update JWT_VERIFY_OPTIONS to include clockTolerance
[... detailed debugging context ...]This creates a recursive agent pattern where agents can delegate complex context-finding to specialized sub-agents.
The MCP server uses the Scout CLI, which reads configuration from:
.swarmrc in the working directory (recommended).ceregrep.json in the working directory (deprecated but supported)~/.swarmrc (global config)ANTHROPIC_API_KEY, CEREBRAS_API_KEY)mcp-server/
├── mcp_server.py # Main MCP server
├── tool_discovery.py # Auto-discovery system
├── tools/
│ ├── base_tool.py # Base tool class
│ └── ceregrep_query_tool.py # Ceregrep query tool
├── pyproject.toml # Dependencies
└── README.md # This filetools/BaseToolname, description, input_schema, and execute()The MCP server automatically discovers agents by running scout agent list --json. To optimize performance:
This means you can:
scout agent init or scout agent importInstall the Scout CLI globally:
npm install -g swarm-scoutEnsure Python ≥ 3.10 and uv are installed:
python --version # Should be ≥ 3.10
uv --version # Should be installedCheck Scout configuration:
scout config # View current configEnsure API keys are set:
ANTHROPIC_API_KEY for ClaudeCEREBRAS_API_KEY for CerebrasAGPL-3.0-or-later
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.