Blindspot Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Blindspot Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Blindspot is a local, general-purpose context engine for AI coding agents.
It exists for one job:
Blindspot is intentionally small. It is not trying to be a deployment system, policy engine, rollout manager, or autonomous edit platform.
Most agents can edit files, search text, and run commands. What they usually lack is a compact, reusable understanding layer for:
That is the gap Blindspot fills.
Paid context engines already proved this model is useful. Blindspot is the local and reusable alternative.
Blindspot keeps one public API and improves the engine underneath it.
The contract does not change per language. get_context(...) stays the same; only the quality of the internal enrichment improves.
Blindspot now exposes only the core context-engine surface:
set_project_path: call once to bind Blindspot to the repoget_project_snapshot: one-shot repo overview at session startget_context: main entrypoint for file, symbol, relationship, and impact contextget_symbol_body: exact symbol metadata or bounded source excerptget_edit_region: small numbered excerpt around a symbol or line rangesearch_code: fallback text search when structured context is not enoughfind_files: locate candidate files before drilling into one with get_contextrefresh_index: rebuild the shallow file index if discovery gets stalebuild_deep_index: rebuild the deep symbol index for richer relationship analysisset_project_path(...)get_project_snapshot() once at the start of a sessionget_context(target=..., intent="before_edit", symbol=...)get_symbol_body(...) or get_edit_region(...)search_code(...)Agents should default to get_context.
get_project_snapshot for orientationget_context for understanding and edit planningget_symbol_body for one symbolget_edit_region for a tight excerptfind_files to locate candidatessearch_code only as fallbackThe agent should not decide between 40 different analysis tools.
Instead, it should call one entrypoint and receive a normalized context envelope:
projecttargetoverviewfile_contextsymbol_contextrelationship_contextimpact_contextdirect_callersindirect_dependentsblast_radiusrisk_reasonssafe_edit_hintsrelated_filesrelated_file_reasonsmissing_contextconfidenceconfidence_detailsedit_plansuggested_next_stepsThat is what get_context(...) returns.
get_context(...) supports these intents:
projectfilesymbolbefore_editimpactThis keeps the public API small while still covering the main agent workflows.
get_context(...) also accepts change_type:
modifyrenamedeletesignature_changecontract_changeUse a stronger change_type when you want Blindspot to plan a coordinated refactor instead of a local edit.
pip install blindspot-mcpAdd this to ~/.claude/settings.json:
{
"mcpServers": {
"blindspot": {
"command": "blindspot-mcp",
"args": ["--project-path", "/path/to/your/project"]
}
}
}Add this to .cursor/mcp.json:
{
"mcpServers": {
"blindspot": {
"command": "blindspot-mcp",
"args": ["--project-path", "."]
}
}
}Developer: Change the User status behavior
Agent:
1. get_project_snapshot()
2. get_context(target="app/models/user.py", intent="before_edit", symbol="is_active")
3. get_symbol_body("app/models/user.py", "is_active")
4. edit with full awareness of related files and likely impactThose concerns make the product noisier and make agents choose tools instead of understanding code.
Blindspot runs locally and analyzes the codebase on your machine.
Blindspot should become:
The standard for success is simple:
Run the core test suite:
python3 -m unittest tests.test_context_engine_service -vRun the lightweight context evaluation harness:
.venv/bin/python evals/run_context_eval.py~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.