agency-plugin — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited agency-plugin (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Plugin do Cursor com regras, skills, agentes, comandos, e MCP para padronizar o trabalho da sua agência.
agency-plugin/
├── .cursor-plugin/
│ └── plugin.json # Manifesto do plugin
├── mcp-runrunit/ # Servidor MCP para Runrun.it (Tasks + Comments + Discord)
├── docs/ # Documentação de referência (API, workflows, entidades)
│ └── Indíce.md # Índice dos tópicos — os agentes consultam esta pasta
├── rules/ # Regras (.mdc)
│ ├── coding-standards.mdc
│ ├── review-checklist.mdc
│ └── docs-reference.mdc # Orienta os agentes a consultar docs/
├── skills/ # Skills do agente
│ └── code-reviewer/
│ └── SKILL.md
├── agents/ # Agentes personalizados
│ └── security-reviewer.md
├── commands/ # Comandos executáveis
│ └── deploy-staging.md
├── hooks/
│ └── hooks.json # Hooks (opcional)
├── assets/
│ └── logo.svg # Logo do plugin
└── README.mddocs/ (e o docs/Indíce.md) para documentação do projeto, API e workflows."runrunit-mcp": {
"command": "npx",
"args": [
"-y",
"mcp-runrunit"
],
"env": {
"RUNRUNIT_APP_KEY": "<APP_KEY>",
"RUNRUNIT_USER_TOKEN": "<USER_TOKEN>",
"CLOUDINARY_CLOUD_NAME": "<CLOUD NAME>",
"CLOUDINARY_API_KEY": "<CLOUDINARY_API_KEY>",
"CLOUDINARY_API_SECRET": "<CLOUDINARY_API_SECRET>",
"BOT_DISCORD_TOKEN_PUBLIC_ID": "<BOT_DISCORD_TOKEN_PUBLIC_ID>",
"BOT_RUNRUNIT_REPORT_PRIVATE_KEY": "<BOT_RUNRUNIT_REPORT_PRIVATE_KEY>",
"DISCORD_GUILD_ID": "<DISCORD_GUILD_ID>",
"DISCORD_CHANNEL_ID": "<DISCORD_CHANNEL_ID>"
}
},**
Substitua os valores entre "" acima por chaves reais
https://i.imgur.com/qT6Xmcz.png
2.1 Faça login/registro https://cloudinary.com/users/register_free (Utilize sua conta google ou Github)
2.2 https://i.imgur.com/cfyDVXA.png
2.3 https://i.imgur.com/ckwAfby.png
Para publicar no marketplace do Cursor:
Ajuste conforme a licença da sua agência (ex.: MIT, proprietária).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.