mcp-development — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mcp-development (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Guidelines for creating and maintaining custom GitHub Copilot agents (.agent.md) tailored to this repository.
1) Create .github/agents/<agent-name>.agent.md (VS Code auto-detects this folder/extension). 2) Add YAML frontmatter with only supported fields: name, description, tools, target, infer, mcp-servers, handoffs. 3) In the body, write concise instructions: task focus, guardrails, run/validate steps, and handoffs. 4) Keep it under ~200-300 lines; link out to docs instead of pasting everything.
name: Display name; defaults to file name if omitted.description: Placeholder text in chat input; keep short.tools: List allowed tools. For MCP servers, use <server>/* to include all tools or enumerate specific ones.target: github-copilot for Copilot agents (default), vscode for VS Code target.infer: Allow subagent use (default true). Set false if you want to restrict subagents.mcp-servers: For Copilot agents, point to MCP server configs (paths to server JSON). Use only if you need to pin servers.handoffs: Optional array of next-step buttons { label, agent, prompt?, send? }.workspace, terminal, search; add fetch for docs; add MCP toolsets only if required.fetch/search.terminal for planning-only agents).Use handoffs to guide sequential flows (e.g., Plan -> Implement -> Review). Keep labels short and make prompts actionable. Use send: false unless you want auto-submit.
argument-hint, etc.).git reset --hard)..github/agents/storybook-interaction-tests.agent.md (interaction test fixer playbook).tools: ['fetch', 'search'], body instructs to gather context and produce a plan, handoff to implementation agent.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.