Mindpm — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mindpm (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Project memory and a control plane for AI coding agents.
mindpm is an MCP (Model Context Protocol) server that gives LLMs a SQLite-backed brain for your projects. It tracks tasks, decisions, architecture notes, and session context — so every new conversation picks up exactly where you left off. It also hands specced tasks to coding agents, keeps parallel agents from colliding, and only counts work as done once a human has accepted it. For agents that run unattended, an optional verifier reruns the checks itself first.
Every new LLM chat starts from zero:
mindpm persists your project state in a local SQLite database. The LLM reads and writes to it via MCP tools. No chat history needed. No memory features needed.
You: "What should I work on next?"
LLM: [queries mindpm] "Last session you finished the auth refactor.
You have 3 high-priority tasks: rate limiting, API docs, and
the webhook retry bug. Rate limiting is unblocked — start there."claude mcp add mindpm -e MINDPM_DB_PATH=~/.mindpm/memory.db -- npx -y mindpmThat's Claude Code, and npx fetches mindpm, so there's nothing to install first. Claude Desktop, Cursor, VS Code, Cline and Windsurf use the same JSON config in a different file. Then just talk about your project. The LLM calls start_session to load its context, records tasks, decisions and notes as you go, and calls end_session to save what's next. A Kanban board runs at http://localhost:3131.
┌──────────────┐ MCP ┌─────────┐ SQLite ┌───────────┐
│ Claude Code, │ ◄──────────► │ mindpm │ ◄────────────► │ memory.db │
│ Cursor, ... │ tools │ server │ read/write │ │
└──────────────┘ └─────────┘ └───────────┘Everything stays on your machine, in one SQLite file (~/.mindpm/memory.db by default). mindpm can also hand specced tasks to coding agents with no conversation context: claims with leases keep parallel agents from colliding, and you accept submitted work on the board. For agents that run unattended, an optional verifier reruns the checks on each submitted commit first.
Security: mindpm has no user accounts and can't stop a process on your own machine. An agent with a shell can call the board's routes as you or edit the database directly. Read the security model before you let agents run unattended.
Full documentation: https://umitkavala.github.io/mindpm/
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.