Clean across every one of the 4 checks that ran, but only 65% of the server could be inspected — so an A isn’t earned yet and the grade is held at B.
- Publisher
- io.github.HrRodan
- Repository
- github.com/HrRodan/agent-workspace-mcp
- Install
- oci:ghcr.io/hrrodan/agent-workspace-mcp:1.0.1, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.0.2, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.0.3, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.0, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.1, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.36, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.37, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.38, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.40, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.41, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.42, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.43, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.44, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.45, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.46, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.47, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.48, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.49, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.50, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.52, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.53, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.54, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.56, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.57, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.58, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.59, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.60, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.61, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.62, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.64, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.65, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.66, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.1.67, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.2.3, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.2.68, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.2.70, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.10, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.11, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.12, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.13, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.14, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.15, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.17, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.18, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.19, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.20, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.21, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.22, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.23, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.24, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.25, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.26, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.27, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.28, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.29, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.3, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.32, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.33, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.34, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.35, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.36, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.37, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.38, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.39, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.41, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.42, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.43, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.6, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.7, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.8, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.3.9, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.0, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.1, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.10, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.11, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.12, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.13, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.14, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.15, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.16, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.18, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.2, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.20, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.21, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.22, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.23, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.24, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.25, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.26, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.27, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.28, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.29, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.3, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.30, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.31, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.32, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.33, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.34, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.35, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.36, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.37, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.38, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.39, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.4, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.40, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.41, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.42, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.43, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.44, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.45, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.46, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.47, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.48, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.49, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.50, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.51, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.52, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.53, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.54, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.55, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.56, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.57, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.58, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.59, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.6, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.60, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.61, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.7, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.8, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.9, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.63, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.64, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.65, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.62, oci:ghcr.io/hrrodan/agent-workspace-mcp:1.4.66
- Versions
- 135
- Inspected
- 4 of 6 checks · 65%
- Scored
- 2026-07-20 · rubric 1.0.0
What we checked
Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.
Injection surface
unscannable25% of gradeTool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).
No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.
Supply chain
pass25% of gradePackage provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.
Python build script has no build-time network/exec; repository linkage verified
Credential hygiene
pass15% of gradeHow the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.
No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.
Permission scope
pass15% of gradeDeclared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.
No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.
Version behavior
pass10% of gradeDiff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).
tool surface, capabilities, install scripts, and publisher unchanged vs prior version 1.4.65 (patch bump); no rug-pull drift.
Transport config
unscannable10% of gradeRemote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.
local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.
Version history
Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.
| Version | Published | Grade | Score | Inspected | Change |
|---|---|---|---|---|---|
| v1.4.66 · current | 2026-07-20 | B | 100 | 4/6 · 65% | ±0 |
| v1.4.65 | 2026-07-19 | B | 100 | 3/6 · 55% | ±0 |
| v1.4.63 | 2026-07-19 | B | 100 | 3/6 · 55% | insf→B in v1.4.63 |
| v1.4.61 | 2026-07-13 | insufficient | — | 1/6 · 25% | B→insf in v1.4.61 |
| v1.4.45 | 2026-06-21 | B | 100 | 3/6 · 55% | insf→B in v1.4.45 |
| v1.3.15 | 2026-04-25 | insufficient | — | 1/6 · 25% | ±0 |
| v1.1.41 | 2026-04-15 | insufficient | — | 1/6 · 25% | — |