Live survey286 models · 13 providers · 19,992 auditsAudited verification-before-completion · SAFE →What changedHow we verifyllms.txt

Agent skill · Audited from source

Mcp Maintainer

skill · hoangsonww/Claude-Code-Agent-MonitorMIT licenceAudited 16 Oct 2026 · source 1f059c400d07

★ 1,080pushed 4 days ago
✓SAFEGrade B · 89/100 · 16 Oct 2026 · 1f059c4
1,080repo stars · whole hoangsonww/Claude-Code-Agent-Monitor
InstallView source on GitHub ↗

Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 1f059c400d07 and found no filesystem, network or shell access and no hard-coded secrets. What it does: Operate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
CoCopilotAIGoogle AI Mode
Cite

Cite this page

ModelsAtlas. “Mcp Maintainer (hoangsonww/Claude-Code-Agent-Monitor)”. Retrieved 16 Oct 2026. https://modelsatlas.com/skills/hoangsonww/mcp-maintainer

Trust audit

Audit 0.4.1 · source read 16 Oct 2026

Trust score89/100✓SAFE B
0 critical0 high0 medium0 low0 info

SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS0
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS0
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (0)

No findings at any severity. We re-audit when the source changes.

Audit 0.4.1 · source sha 1f059c400d07 · 16 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publisherhoangsonww GitHub userOwner of the repository this skill is read from
  • Source folderhoangsonww/Claude-Code-Agent-Monitor/.agents/skills/mcp-maintainerThe exact folder we audited
  • LicenceMITAs the repository states it
  • Commit pinned for this verdict1f059c400d07A new audit runs when the source changes
  • Repository statusNot archivedLast push 4 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Operate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.

---
name: mcp-maintainer
description: Operate and maintain the local MCP server for this repository. Use for MCP tool updates, policy-guard changes, host configuration, and MCP runtime troubleshooting.
---

# MCP Maintainer Skill

## Workflow
- Confirm dashboard API availability (`/api/health`).
- Inspect affected MCP domain modules under `mcp/src/tools/domains/`.
- Preserve safety gates in `mcp/src/policy/tool-guards.ts`.
- Validate with `npm run mcp:typecheck` and `npm run mcp:build`.

## Safety rules
- Keep loopback-only target checks enabled.
- Keep mutating and destructive tools behind explicit flags.
- Do not log protocol data to stdout.

## References
- `references/tool-domain-map.md`
- `references/operations-runbook.md`

Excerpt, first 737 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 1f059c4

Download folder ↗
git clone https://github.com/hoangsonww/Claude-Code-Agent-Monitor
git -C Claude-Code-Agent-Monitor checkout 1f059c400d07

The author documents no install command, so this uses the repository directly. Our verdict covers commit 1f059c400d07 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CodexMentioned in its text, not testedSkills for Codex · About Codex
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✓SAFE B 89 / 100

    first audit · source 1f059c400d07

README badge

For maintainers · shows the latest audit

ModelsAtlas: SAFE BMODELSATLASSAFE · B 
[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/hoangsonww/mcp-maintainer/badge.svg)](https://modelsatlas.com/skills/hoangsonww/mcp-maintainer/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Anomaly Alert✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Identify anomalous sessions using Agent Monitor data — cost outliers from the pricing engine, token anomalies (cache miss spikes, compaction baseline surges), unusual event type ratios (PreToolUse/PostToolUse gaps,…

★ 1.1kGrade B
Cost Breakdown✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Break down Claude Code costs using the Agent Monitor pricing engine. Shows per-model costs (input, output, cache_read, cache_write at $/Mtok rates), per-session costs, daily trends, and compaction baseline token…

★ 1.1kGrade B
Daily Standup✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Generate a daily standup summary from recent Claude Code sessions — completed work grouped by project (cwd), session costs from the pricing engine, tool invocations, error/compaction/APIError events, and turn velocity…

★ 1.1kGrade B
Dashboard Status✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Quick dashboard health and status overview — checks the Agent Monitor API (port 4820), reports session/agent/event counts from /api/stats, confirms WebSocket connectivity, reads the redacted hook status returned by…

★ 1.1kGrade B
Data Export✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Export Claude Code session and analytics data in JSON, CSV, or Markdown formats. Supports exporting sessions, events, costs, and analytics for external analysis or reporting. Use for data backup or integration.

★ 1.1kGrade B
Debug Live Issue✓SAFE

hoangsonww/Claude-Code-Agent-Monitor

Debug production-like issues in this repository with disciplined evidence gathering. Use when fixing failing workflows, regressions, flaky behavior, or data inconsistencies across hooks, API, DB, websocket, and UI.

★ 1.1kGrade B

Add this badge to your README

[![ModelsAtlas: SAFE B](https://modelsatlas.com/skills/hoangsonww/mcp-maintainer/badge.svg)](https://modelsatlas.com/skills/hoangsonww/mcp-maintainer/)

Questions about Mcp Maintainer

What does the Mcp Maintainer skill do?
🚀 A real-time monitoring dashboard for Claude Code & Codex, built with SQLite3, Node.js, Express, React, Vite, TailwindCSS, & WebSockets. It tracks sessions, agent activity, tool usage, and subagent orchestration, providing live analytics, a Kanban status board, status notifications, a cute buddy, &
Is Mcp Maintainer safe to install?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean skill reads B.
What can Mcp Maintainer access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does Mcp Maintainer work with?
Its documentation mentions codex. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (1f059c400d07), read on 2026-10-16. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.