sync-team — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited sync-team (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Sync your team's standard dev configurations with intelligent AI-powered merging. This skill pulls team config profiles and uses your IDE's LLM to intelligently merge them with your existing personal configurations — preserving your customizations while incorporating team standards.
The devsync-mcp MCP server must be configured. Add to your MCP settings:
{
"mcpServers": {
"devsync-mcp": {
"command": "devsync-mcp",
"transport": "stdio"
}
}
}Ask the user for their team config repository URL if not already known:
"What's the Git URL for your team's config profile? (e.g., https://github.com/acme/team-configs)"
Use the pull_team_profile MCP tool:
pull_team_profile(git_url="<user's URL>")Report the profile name, version, and number of configs found.
Use list_profile_configs with the namespace from step 2:
list_profile_configs(namespace="<namespace>")Present the list to the user in a readable format:
| Config | Type | Target | Description |
|---|---|---|---|
| ... | ... | ... | ... |
Use get_merge_status to see what's already been merged:
get_merge_status(namespace="<namespace>")Show which configs are pending, merged, or changed since last merge.
For each config the user wants to merge (or all pending ones):
preview_merge(namespace, config_name) to get both source (team) and target (your current) content.# Merged from <profile_name> on <date>apply_merge(namespace, config_name, merged_content, target_path).After all merges, show a summary:
restore_backup with the backup path"For returning users, use sync_all to check for updates:
sync_all(namespace="<namespace>")This pulls latest changes and shows what needs attention. Only re-merge configs that are "pending" (new) or where the team profile has been updated.
If the user wants to undo a merge:
list_backups(profile_name="<namespace>") — find the backuprestore_backup(backup_path="<path>", target_path="<original>") — restore it~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.