Add SafeSkill security badge (97/100 — Verified Safe)#1
Add SafeSkill security badge (97/100 — Verified Safe)#1OyaAIProd wants to merge 1 commit intodevjoaocastro:mainfrom
Conversation
📝 WalkthroughWalkthroughA SafeSkill verification badge link was added to the README.md file under the "What This Does" section. This is a documentation-only addition requiring no code changes. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
🧹 Nitpick comments (1)
README.md (1)
25-26: SafeSkill report URL is accessible and correct.The SafeSkill badge URL is publicly accessible (HTTP 200) and correctly links to the repository's security report.
Consider placing the badge with other badges for visual consistency.
The SafeSkill badge is currently isolated under the "What This Does" section. For better visual organization and consistency, move it to lines 11-15 where the other badges (npm, vulk.dev, license) are grouped.
📝 Alternative placement with other badges
Remove from current location:
## What This Does -[](https://safeskill.dev/scan/devjoaocastro-vulk-mcp-server) - This MCP server connects AI coding assistants to VULK's app builder.Add with other badges at the top:
<p align="center"> <a href="https://www.npmjs.com/package/@vulk/mcp-server"><img src="https://img.shields.io/npm/v/@vulk/mcp-server?color=0D9373" alt="npm" /></a> <a href="https://vulk.dev"><img src="https://img.shields.io/badge/vulk.dev-live-0D9373" alt="VULK" /></a> <a href="https://github.com/devjoaocastro/vulk-mcp-server/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT License" /></a> + <a href="https://safeskill.dev/scan/devjoaocastro-vulk-mcp-server"><img src="https://img.shields.io/badge/SafeSkill-97%2F100_Verified%20Safe-brightgreen" alt="SafeSkill 97/100" /></a> </p>🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@README.md` around lines 25 - 26, Move the SafeSkill badge markdown line that starts with "[![SafeSkill 97/100]" out of the "What This Does" section and place it alongside the existing badge group near the top where the npm, vulk.dev and license badges are defined so all badges are visually grouped; locate the badge line in README.md (the full "[](https://safeskill.dev/...)" string) and insert it with the other badges, removing the original isolated occurrence.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Nitpick comments:
In `@README.md`:
- Around line 25-26: Move the SafeSkill badge markdown line that starts with
"[![SafeSkill 97/100]" out of the "What This Does" section and place it
alongside the existing badge group near the top where the npm, vulk.dev and
license badges are defined so all badges are visually grouped; locate the badge
line in README.md (the full "[](https://safeskill.dev/...)" string) and
insert it with the other badges, removing the original isolated occurrence.
1 participant
✅ SafeSkill Security Scan Results
Top Findings
src/index.ts:55)src/api.ts:31)src/api.ts:93)src/api.ts:6)src/index.ts:55)View full report on SafeSkill
About SafeSkill
SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.
False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.
Summary by CodeRabbit