Install payload
Install payload is broadly covered in current results.
88% (7/8)
Source-backed filter active — add entries to compare trust side by side.
8 results in this view
2 trust signals differ in this sample: Source provenance, Submitter
Signals differ on Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
88% (7/8)
Adoption queue
1/8 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/backlog-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/burp-suite-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/claude-code-troubleshooting-triage-capability-pack · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/codacy-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
skills/flutter-agent-skills · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
hooks/shellcheck-static-analysis-hook · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/sonarqube-mcp-server · trust review · confidence 67%
2 blockers: Metadata review, Install payload
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/semgrep · trust review · confidence 50%
Decision confidence
1/8 results are low-confidence and need review before adoption.
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/backlog-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/burp-suite-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
skills/claude-code-troubleshooting-triage-capability-pack · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/codacy-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
skills/flutter-agent-skills · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
hooks/shellcheck-static-analysis-hook · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/sonarqube-mcp-server · trust review
Hold adoption until Metadata review, Package integrity are resolved.
36/100
tools/semgrep · trust review
Freshness distribution
Median age 48 days; all 8 scanned entries are within 90 days.
Theme distribution
38 distinct themes with no dominant one. Most common: mcp, security, claude-code.
38 distinct themes across 8 scanned
Manage Backlog projects from Claude — create and update issues, comment on tickets, manage wiki pages, review pull requests, and navigate your Nulab Backlog space — with the official Backlog MCP server supporting stdio and HTTP transports.
PortSwigger's Burp Suite MCP Server extension connects Burp Suite to MCP clients through an SSE server or packaged stdio proxy for request, Repeater, Intruder, history, scanner, Collaborator, and configuration workflows.
Official SonarSource MCP server that connects Claude to SonarQube Server or SonarQube Cloud for code quality, security issues, hotspots, measures, quality gates, branches, pull requests, snippets, and system context.
The official Codacy MCP server (@codacy/codacy-mcp) that gives AI assistants access to the Codacy API for code quality, security, and coverage — listing repository and pull-request issues, retrieving file coverage and duplication, searching security (SRM) findings, inspecting analysis tools and patterns, and running local analysis with the Codacy CLI.
Official Flutter team Agent Skills for AI coding agents building Flutter apps, fixing layout issues, adding widget and integration tests, creating widget previews, applying layered architecture, routing, localization, JSON serialization, and HTTP workflows.
Expert Claude Code troubleshooting triage capability pack for diagnosing install failures, auth errors, MCP issues, sandbox blocks, and update regressions with source-backed triage matrices and privacy-safe support output.
Read-only Claude Code PostToolUse hook that runs ShellCheck diagnostics after Claude writes or edits shell scripts, reporting shell portability, quoting, expansion, error-handling, and command-safety issues without modifying files.
Static analysis platform and open-source CLI for finding bugs, security issues, secrets, dependency risk, and custom rule matches in code.