No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by trailhq · MCP Server · ★ 8.8k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is Graft safe to install? View the security audit →
Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase. <img src="https://img.shields.io/badge/License-MIT-20C997?style=for-the-badge"
| Stars | 8,754 |
| Forks | 800 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 65.0970472556691/100 |
| Open Issues | 177 |
| Last Updated | 2026-09-20 |
| Created | 2026-07-03 |
| Platforms | claude-code, cli, codex, gemini, mcp, node |
| Est. Tokens | ~23k |
These tools work well together with Graft for enhanced workflows:
Looking for a Graft alternative? If you're comparing Graft with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Effici
程序员鱼皮的 AI 资源大全 + Vibe Coding 零基础教程，分享 OpenClaw 保姆级教程、大模型玩法（DeepSeek / GPT / Gemini / Claude / GLM）、最新 AI 资讯、Pr
The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI
Professional context and harness engineering for Claude Code and OpenAI Codex. Build production-grade software
📦 Repomix is a powerful tool that packs your entire repository into a single, AI-friendly file. Perfect for w
Unity MCP acts as a bridge between AI assistants and your Unity Editor. Give your LLM tools to manage assets,
Explore other popular mcp server tools:
Graft is Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.. It is categorized as a MCP Server with 8.8k GitHub stars.
Graft is primarily written in TypeScript. It covers topics such as ai-agents, anthropic, claude-code.
You can find installation instructions and usage details in the Graft GitHub repository at github.com/trailhq/Graft. The project has 8.8k stars and 800 forks, indicating an active community.
Graft is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to Graft on Agent Skills Hub include Unity-MCP, ai-guide, code-graph-rag. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: