# com.seanwinslow/intent-engineering (npm · @swins/intent-engineering-mcp)

Audit, scaffold, and triage agent intent specs against a 9-section template.

- Trust score: 66/100 (medium)
- Change this week: +21
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@swins/intent-engineering-mcp`: 66/100 (this document), [markdown](https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp.md), [page](https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp)

## Channel facts

- Registry: `npm`
- Package: `@swins/intent-engineering-mcp`
- Version: `0.2.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 83/100
  - No malware found by supply-chain analysis.
  - CVE check failed: a known medium-severity CVE affects @hono/node-server 1.19.17, reached via @modelcontextprotocol/sdk > @hono/node-server. A fixed version is available.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 45 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 66/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 485 tokens (~161/item across 3 items; 3 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add com-seanwinslow-intent-engineering -- npx -y @swins/intent-engineering-mcp
```

### Codex

```bash
codex mcp add com-seanwinslow-intent-engineering -- npx -y @swins/intent-engineering-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-seanwinslow-intent-engineering": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@swins/intent-engineering-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-seanwinslow-intent-engineering --command npx --arg -y --arg @swins/intent-engineering-mcp
```

### Hermes

```yaml
mcp_servers:
  com-seanwinslow-intent-engineering:
    command: "npx"
    args: ["-y", "@swins/intent-engineering-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "com-seanwinslow-intent-engineering": {
      "command": "npx",
      "args": [
        "-y",
        "@swins/intent-engineering-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 66, +46)

- [security regression] GHSA-frvp-7c67-39w9 affects this package: medium
- [security regression] Provenance: unverified → fail
- [security regression] Known CVEs: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Stability: unverified → 0.23
- [functional improvement] Schema quality: unverified → good
- [functional improvement] License: unverified → pass
- [functional] First check of Schema quality: unverified
- [functional] Licence: MIT

### 2026-07-31 (score 20, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 45)

First indexed and scored.

## MCP tools (3)

### `audit_intent_spec` (~171 tokens)

Audit Intent Spec

Audit an intent spec against the 25-item validation checklist and the 5 fatal anti-patterns from the intent-engineering skill. Provide either spec_text (raw spec) OR file_path (absolute path to a markdown or YAML file). For long inputs, use start_index + max_length to paginate; the response includes next_chunk_token when more content remains.

Input parameters:

- `file_path` (string): Absolute path to a markdown or YAML intent spec file. Provide this OR spec_text, not both.
- `max_length` (integer): Max characters of input to process this call. Default 10000.
- `spec_text` (string): The raw intent spec text. Provide this OR file_path, not both.
- `start_index` (integer): Zero-based character offset for paginated input. Default 0.

### `generate_intent_spec_scaffold` (~187 tokens)

Generate Intent Spec Scaffold

Return the appropriate intent-spec template (blank, Level-1 MVR, or full 9-section) with optional pre-filled objective_hint, autonomy_level, and agent_name. Use this when starting a new agent/skill or retrofitting an existing one.

Input parameters:

- `agent_name` (string): Optional agent/skill name. Used in the YAML header.
- `autonomy_level` (string): Optional autonomy level. Pre-fills the Decision Authority section with the matching architecture pattern.
- `kind` (string): Which scaffold to return. 'blank' = empty 9-section template; 'level-1-mvr' = 3-section minimum-viable retrofit; 'full-9-section' = full template with prompts.
- `objective_hint` (string): Optional one-sentence hint about what the agent should do. Pre-fills the objective field with a starter draft.

### `assess_retrofit_level` (~127 tokens)

Assess Retrofit Level

Look at an existing prompt or SKILL.md and recommend the right retrofit level (L1-mvr / L2-structured / L3-full) with reasoning grounded in the intent-engineering skill's blast-radius / complexity / autonomy framework. Provide either skill_text (raw text) OR file_path (absolute path to an existing SKILL.md or prompt file).

Input parameters:

- `file_path` (string): Absolute path to an existing SKILL.md or prompt file.
- `skill_text` (string): The existing prompt or SKILL.md text. Provide this OR file_path, not both.

## Diagnostics

Captured diagnostic sections: Provenance, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 66
- 2026-08-01: 20
- 2026-07-31: 20
- 2026-07-30: 45
- 2026-07-28: 45
- 2026-07-27: 45

## Links

- npm package: https://www.npmjs.com/package/@swins/intent-engineering-mcp
- Socket report: https://socket.dev/npm/package/@swins/intent-engineering-mcp
- Repository: https://github.com/seanwinslow28/sw-mcp-intent-engineering
- Changelog RSS feed: https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/com-seanwinslow-intent-engineering/swins-intent-engineering-mcp
