Install payload
Install payload is broadly covered in current results.
100% (3/3)
Select entries to compare install and trust signals side by side.
3 results in this view
1 trust signal differs in this sample: Submitter
Signals differ on Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
100% (3/3)
Adoption queue
0/3 visible results are ready for staged adoption under this preset.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
rules/ai-generated-idor-review-rules · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/database-query-performance-logger · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/graphql-mcp-server · trust review · confidence 67%
Decision confidence
0/3 results are high-confidence for the selected preset.
Address Metadata review, Package integrity before broader rollout.
54/100
rules/ai-generated-idor-review-rules · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/database-query-performance-logger · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/graphql-mcp-server · trust review
Freshness distribution
Median age 45 days; 2 fresh, 1 aging or stale of 3 scanned.
Oldest entries in this view
Theme distribution
16 distinct themes with no dominant one. Most common: ai-generated-code, api, api-security.
16 distinct themes across 3 scanned
Generic GraphQL MCP server for schema introspection, schema resources, and GraphQL query execution against a configured endpoint.
Source-backed rules for reviewing AI-generated endpoints and data-access code before merge for insecure direct object reference risk, covering per-request object-level authorization checks, scoped database lookups, identifier exposure, and consistent enforcement across read, write, and admin operations.
A PostToolUse hook that reminds you to enable native query logging for PostgreSQL, Prisma, Sequelize, and TypeORM, and flags possible N+1 patterns when you edit SQL or data-access files.