Ragtag Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Ragtag Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Hacky MVP for local RAG search.
Clone this repo
cd /Users/suhdude/repos
gh repo clone weston-barger/ragtag-mcpYou'll need local copies of the content you want to search. Example:
cd /Users/suhdude/repos
gh repo clone holoviz/param
gh repo clone holoviz/panel
gh repo clone bokeh/bokehSet up your rag_config.json to look like this
{
"indices": [],
"dbStoragePath": "/Users/suhdude/repos/ragtag-mcp/db",
"model": {
"embedding": "nomic-embed-text:latest",
"llm": "qwen3:latest"
}
}the dbStoragePath is where your vector database for searching will live.
You'll want to set up a python venv for this repo. Run
python3 -m venv .venv
source ./.venv/bin/activate
pip3 install -r requirements.txt --upgradeThe main.py has a command that will help you do this on OSX. Run
python main.py osx_installNOTE: you'll want to re-run the osx_install command if you change the embedding or llm models in the config.
Now fill our the indices section of your rag_config.json file. There is an example in example_rag_config.json. Then run
python main.py buildThis may take a a bit. See python main.py build --help to see how to build one index at a time.
Add
{
"mcpServers": {
"RAG": {
"command": "/Users/suhdude/repos/ragtag-mcp/.venv/bin/python3",
"args": [
"/Users/suhdude/repos/ragtag-mcp/main.py",
"serve"
]
}
}
}to your .mcp.json file for your project.
Open claude an issue /mcp. You should see RAG!
Add something to your CLAUDE.md file to tell it to use RAG to get context
(My project) relies on packages pkg1, pkg2, pkg3. Use the RAG search MCP server to understand how to use packages pkg1, pkg2, pkg3 when planning code changes. ~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.