Install payload
Install payload is mixed and needs spot-checking.
71% (5/7)
Source-backed filter active — add entries to compare trust side by side.
7 results in this view
1 trust signal differs in this sample: Submitter
Signals differ on Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 1 entries have 2+ required gaps.
Install payload
Install payload is mixed and needs spot-checking.
71% (5/7)
Adoption queue
2/7 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/cve-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/hexstrike-ai-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/nvidia-skillspector · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
statuslines/osv-dependency-risk-statusline · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/pentest-ai-mcp-server · trust review · confidence 67%
2 blockers: Metadata review, Install payload
36/100
Request metadata review from maintainers or internal owners.
Add install/config payload for reproducible team rollout.
Collect package checksum or signed artifact information.
tools/grype · trust review · confidence 50%
3 blockers: Metadata review, Safety notes
10/100
Request metadata review from maintainers or internal owners.
Capture safety notes with misuse/guardrail guidance.
Add install/config payload for reproducible team rollout.
tools/garak · trust review · confidence 17%
Decision confidence
2/7 results are low-confidence and need review before adoption.
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/cve-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/hexstrike-ai-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
tools/nvidia-skillspector · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
statuslines/osv-dependency-risk-statusline · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/pentest-ai-mcp-server · trust review
Hold adoption until Metadata review, Package integrity are resolved.
36/100
tools/grype · trust review
Hold adoption until Metadata review, Safety notes are resolved.
10/100
tools/garak · trust review
Freshness distribution
Median age 53 days; 6 fresh, 1 aging or stale of 7 scanned.
Oldest entries in this view
Theme distribution
100% of this view shares the top theme. Leading themes: security, osv, agent-skills.
25 distinct themes across 7 scanned
Security intelligence MCP server that lets Claude look up CVEs, EPSS scores, CISA KEV status, OSV package vulnerabilities, exploit indicators, MITRE mappings, IP reputation, passive DNS, Shodan host data, malware intelligence, URL safety, and risk reports across optional third-party APIs.
Claude Code statusline that reads OSV-Scanner JSON results and prints a compact dependency vulnerability count for review sessions.
Open-source LLM vulnerability scanner for probing model behavior, prompt attack surfaces, and safety failures.
Offensive-security MCP server from pentest-ai that lets Claude list and run wrapped security tools, plan and install missing tools, launch authorized engagements, run web, recon, API, cloud, AD, credential, vulnerability, mobile, wireless, and LLM-red-team assessments, and retrieve findings, attack chains, reports.
Apache-2.0 vulnerability scanner from Anchore for container images, filesystems, archives, SBOMs, PURLs, and CPEs, with risk scoring, VEX filtering, and CI-friendly output.
Apache-2.0 security scanner from NVIDIA for AI agent skills, with static pattern checks, optional LLM semantic analysis, MCP least-privilege and tool poisoning analyzers, OSV.dev vulnerability lookups, risk scoring, and terminal, JSON, Markdown, and SARIF reports.
Offensive security MCP framework that connects AI agents to a large toolkit for authorized penetration testing, vulnerability discovery, CTF, OSINT, and security research workflows.