Audit AI skill safety before you ship. Static + semantic + adversarial audit pipeline for SKILL.md, Codex skill.yaml, Claude Code commands, and OpenCode. Free hosted tier on tarai.dev.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add tar-engine --env TAR_ENGINE_BYOK_OPENAI_KEY='<TAR_ENGINE_BYOK_OPENAI_KEY>' --env TAR_ENGINE_BYOK_ANTHROPIC_KEY='<TAR_ENGINE_BYOK_ANTHROPIC_KEY>' -- uvx tar-engine~/.codex/config.toml
[mcp_servers.tar-engine]
command = "uvx"
args = ["tar-engine"]
env = { TAR_ENGINE_BYOK_OPENAI_KEY = "<TAR_ENGINE_BYOK_OPENAI_KEY>", TAR_ENGINE_BYOK_ANTHROPIC_KEY = "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>" }
# codex mcp add tar-engine --env TAR_ENGINE_BYOK_OPENAI_KEY='<TAR_ENGINE_BYOK_OPENAI_KEY>' --env TAR_ENGINE_BYOK_ANTHROPIC_KEY='<TAR_ENGINE_BYOK_ANTHROPIC_KEY>' -- uvx tar-engine~/.cursor/mcp.json
{
"mcpServers": {
"tar-engine": {
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"tar-engine": {
"type": "stdio",
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"tar-engine": {
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"tar-engine": {
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"tar-engine": {
"command": "uvx",
"args": [
"tar-engine"
],
"env": {
"TAR_ENGINE_BYOK_OPENAI_KEY": "<TAR_ENGINE_BYOK_OPENAI_KEY>",
"TAR_ENGINE_BYOK_ANTHROPIC_KEY": "<TAR_ENGINE_BYOK_ANTHROPIC_KEY>"
}
}
}
}Environment variables
TAR_ENGINE_BYOK_OPENAI_KEYTAR_ENGINE_BYOK_ANTHROPIC_KEY
Replace the placeholders with your own credentials and keep them out of version control.