10 actions in 3 pieces of software · ranked by words, meaning and measured trust · 1051 ms

1. 1sigilfound in code, not yet checkedno passport yet

   MCP servernomarj/sigil

   • sigil_report_threat

     Report a malicious file to the Sigil threat intelligence database by its SHA256 hash. Requires the Sigil CLI and an authenticated session (sigil login). Reports are reviewed by the security team.

   • sigil_scan

     Scan a file or directory for security issues. Returns structured findings with severity, phase, and location. Use this to audit code before running, installing packages, or reviewing pull requests.

   • sigil_search_database

     Search the Sigil public scan database for packages by name or keyword. Returns a list of scanned packages with their verdicts and risk scores.

   • sigil_check_package

     Look up a package or skill's risk assessment in the Sigil public scan database. Works for ClawHub skills, PyPI packages, npm packages, and MCP servers.

   • sigil_residue_plan

     Show the reversible fixes Sigil would make for host residue, without applying them. Apply and rollback are deliberately not exposed as tools; a human runs them in a terminal.

   • sigil_grade

     Letter grade (A-F), recommendation, behaviour profile and key risks for a path. Cheaper to read than sigil_scan when only the verdict matters.

2. 2sigilfound in code, not yet checkedno passport yet

   MCP serverdrknowhow/sigil

   • lift

     Lift Python source at `path` into the digest sheet (one line per definition: #hash name(sig) effects). Idempotent: re-lifting unchanged code appends nothing; changed definitions append '#old -> #new'. Parse-only — never executes the lifted code.

   • load_module

     Load a Sigil module (goals + fns) from source text: registers goals in the store, puts definitions, appends sheet lines. This is the MCP path for creating goals — no CLI round-trip needed. Returns {module, goals: {name: hash}, fns: {name: hash}}.

   • verify

     Run a goal's verify clauses (subprocess-isolated, cached by (goal,impl) hash — unchanged code is a cache hit). Passing binds goal<->impl; anything else stays 'provisional'.

3. 3sigilfound in code, not yet checkedno passport yet

   MCP serversimphani2k/sigil

   • outline

     Show headings for a file.