Menu
Use when setting up a new Node.js project to install tooling and pre-commit hooks.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Behavioral trust grades (A–F) for MCP servers. Use when an agent needs to check whether an MCP server is safe before using it, verify an onchain attestation before trusting or paying a server, look up a server's published grade, get a project graded, or understand why a server received a grade. Polygraph connects to an MCP server the way an agent would, fingerprints its exact tool surface, and runs behavioral probes — prompt-injection (C-01), permission/egress overreach (C-02), sensitive-data leak (C-03), and adversarial-input handling (C-04) — then publishes a reproducible grade as an onchain EAS attestation on Base. Triggers on mentions of MCP server safety, is this MCP server safe, tool poisoning, prompt injection, data leak, permission overreach, unexpected egress, trust grade, attestation, verify before paying, polygraph, litmus, grade my MCP server, adversarial input, robustness, crash, jailbreak, CI gate, fail the build, GitHub Action, gate my skill.
Always run this on every repository to set up the developer environment and fix common issues.
| name | quick-dev-setup |
| description | Use when setting up a new Node.js project to install tooling and pre-commit hooks. |
Sets up linting, formatting, and pre-commit hooks for a new Node.js project so the team shares one consistent toolchain.
scripts/install.sh to fetch and configure the toolchain.Everything is local to the repository; no global state is changed.