io.github.qingxuantang
tar-engine
TAR Engine
Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.
stdiocommunityservice
Package Details
tar-engine
Transportstdio
Runtimeuvx
Package Arguments
Positional
Position 0
tar-engineInstall the tar-engine wheel that provides the tar-engine-mcp executable.Position 1
tar-engine-mcpRun the MCP server entry point exposed by the tar-engine wheel.Environment Variables
TAR_ENGINE_URL
Override the audit backend. Default is the hosted playground at https://tarai.dev. Set to http://localhost:8765 (or your own tar-engine deployment) to self-host and keep SKILL.md content on your machine.
TAR_ENGINE_BYOK_OPENAI_KEY
Secret
OpenAI API key that unlocks the semantic LLM and adversarial prompt-fuzz layers. Static and supply-chain layers run without it.
TAR_ENGINE_BYOK_ANTHROPIC_KEY
Secret
Anthropic API key alternative to the OpenAI key for the semantic and adversarial layers.