Install
$ agentstack add mcp-secbear-skelegent ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Skelegent — composable agentic runtime
Skelegent is an experiment in building an agentic system that is composable by construction: layered protocol contracts, swappable providers/tools/state, and deterministic backpressure via tests and specs.
Specs are the source of truth: SPECS.md and specs/.
Quickstart (Nix)
This repo assumes Rust tooling is provided by the Nix flake.
- Full verification:
./scripts/verify.sh - Canonical commands: see
AGENTS.md §Verification
Crate map (workspace members)
Core:
layer0/— protocol traits + wire contractskelegent/— umbrella crate
Turn (turn/):
skg-turn— turn types + provider abstractionskg-turn-kit— turn decomposition primitivesskg-context— prompt/context assemblyskg-tool— tool traits +ToolRegistryskg-mcp— MCP client/server
Operators (op/):
skg-context-engine— ReAct-style operator loopskg-op-single-shot— single-shot operator
Orchestration (orch/):
skg-orch-kit— composition building blocksskg-orch-local— local orchestrator
Effects (effects/):
skg-effects-core— effect executor traitskg-effects-local— local effect interpreter
Middleware (hooks/):
skg-hook-security— security middleware (RedactionMiddleware, ExfilGuardMiddleware)
State (state/):
skg-state-memory— in-memory state storeskg-state-fs— filesystem-backed state store
Environment (env/):
skg-env-local— local environment (process/tool execution glue)
Providers (provider/):
skg-provider-anthropicskg-provider-openaiskg-provider-ollama
Security (secret/, auth/, crypto/):
skg-secret— secret resolutionskg-secret-vault— HashiCorp Vault backendskg-auth— auth/credential frameworkskg-crypto— cryptographic primitives
Implementations
Heavy-dependency implementations — SQLite, CozoDB, Temporal, Git effects, sweep operators, and auth providers — live in a separate repository to keep this core dependency-free:
skelegent-extras — provider ecosystem
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: secbear
- Source: secbear/skelegent
- License: Apache-2.0
- Homepage: https://secbear.github.io/skelegent
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.