Imported from saagpatel/mcp-trust (src/mcp_trust/site/AGENTS.md). Install upstream with npx skills add saagpatel/mcp-trust --skill site. Copyright stays with the author.

AGENTS.md - MCP Trust Web And Static Site Surface

Name: site
Author: saagpatel

Review guidelines

Treat rendered HTML, generated static pages, catalog tables, and badge payloads as public trust surfaces. If masking or provenance logic changes, verify both the live renderer and the static generator; they must not diverge on grade visibility, description wording, stale state, or provenance claims.

Operator masking applies to page metadata before any scan exists. Scan-specific masking applies to grade/risk/finding details only when a scan exists. Badges may still show unscanned for unscanned entries, but detail pages and catalog copy must not leak grade-bearing catalog prose for operator-masked slugs.

Demo/stub provenance should be visibly labeled before remote-source wording. Remote entries with a local launch command are not plain hosted endpoints; keep the local-launch and sandbox context honest.

{ "ocm": "1", "id": "saagpatel-mcp-trust-site", "kind": "skill", "name": "site", "description": "Treat rendered HTML, generated static pages, catalog tables, and badge payloads as public trust surfaces. If masking or provenance logic changes, verify both the live renderer and the static generator; they must not diverge on grade visibility, description wording, stale state, or provenance claims.", "publisher": "saagpatel", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "github-agents" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Treat rendered HTML, generated static pages, catalog tables, and badge payloads as public trust surfaces. If masking or provenance logic changes, verify both the live renderer and the static generator; they must not diverge on grade visibility, description wording, stale state, or provenance claims." ], "primary": false, "metadata": { "source": { "provider": "github-agents", "repository": "https://github.com/saagpatel/mcp-trust", "path": "src/mcp_trust/site/AGENTS.md", "ref": "59a8953d395c76755a21e84e00d82469c3ad2a16", "url": "https://github.com/saagpatel/mcp-trust/blob/59a8953d395c76755a21e84e00d82469c3ad2a16/src/mcp_trust/site/AGENTS.md", "key": "saagpatel/mcp-trust/src/mcp_trust/site/AGENTS.md" } }, "instructions": "# AGENTS.md - MCP Trust Web And Static Site Surface\n\n## Review guidelines\n\nTreat rendered HTML, generated static pages, catalog tables, and badge payloads\nas public trust surfaces. If masking or provenance logic changes, verify both\nthe live renderer and the static generator; they must not diverge on grade\nvisibility, description wording, stale state, or provenance claims.\n\nOperator masking applies to page metadata before any scan exists. Scan-specific\nmasking applies to grade/risk/finding details only when a scan exists. Badges\nmay still show `unscanned` for unscanned entries, but detail page", "cost": { "context_tokens": 222 } }

site

About

AGENTS.md - MCP Trust Web And Static Site Surface

Review guidelines

Use it

Manifest

Reviews