Skip to content

Add SafeSkill security badge (92/100 — Verified Safe) - #1

Open
OyaAIProd wants to merge 1 commit into
199-biotechnologies:mainfrom
OyaAIProd:safeskill-scan-1775182033309
Open

Add SafeSkill security badge (92/100 — Verified Safe)#1
OyaAIProd wants to merge 1 commit into
199-biotechnologies:mainfrom
OyaAIProd:safeskill-scan-1775182033309

Conversation

@OyaAIProd

Copy link
Copy Markdown

✅ SafeSkill Security Scan Results

Metric Value
Overall Score 92/100 (Verified Safe)
Code Score 91/100
Content Score 92/100
Findings 144 findings detected (45 critical)
Taint Flows 0
Files Scanned 19
Scan Duration 4.9s

Top Findings

  • 🔴 critical: Spawns child process (src/storage/database.ts:184)
  • 🔴 critical: Spawns child process (src/storage/database.ts:197)
  • 🔴 critical: Spawns child process (src/storage/database.ts:214)
  • 🔴 critical: Spawns child process (src/storage/database.ts:224)
  • 🔴 critical: Spawns child process (src/storage/database.ts:247)

View full report on SafeSkill


About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

longevityboris added a commit that referenced this pull request Apr 3, 2026
Swap all-MiniLM-L6-v2 → mdbr-leaf-ir (MongoDB LEAF):
- #1 on BEIR benchmark for models under 100M parameters
- BEIR nDCG@10: 53.55 vs 41.95 (28% improvement)
- Same 23M params, same 384 dims, same ~1ms inference
- ONNX-compatible via onnx-community/mdbr-leaf-ir-ONNX

Added model version tracking:
- engram_metadata table stores current embedding model name
- On model change, vectors are cleared and re-indexed automatically
- clearAllVectors() and get/setMetadata() database methods

First startup after upgrade will re-index all memories in the
background (~15s for 900 memories). Server responds immediately
while indexing runs async.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant