MCPgrade

MCP server · trust report

io.github.microsoft/awesome-copilot

Published by io.github.microsoft

version-control

Only 2 of 6 checks could run, which is below the bar to certify — nothing that ran raised a red flag.

Publisher
io.github.microsoft
Repository
github.com/microsoft/mcp-dotnet-samples
Install
oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030407, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030502, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030511, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030521, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030602, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030604, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030823, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030900, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030904, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026030905, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031100, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031201, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031223, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031303, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031600, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031622, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031703, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031800, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031900, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031905, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026031923, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032004, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032300, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032303, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032304, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032323, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032405, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032423, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032500, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032523, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032700, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032705, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026032921, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026033000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026033001, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026033100, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040100, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040123, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040800, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040901, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040903, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026040905, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041001, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041005, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041300, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041400, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041523, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026041701, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042003, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042803, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042805, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042808, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042901, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026042903, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026043000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050100, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050401, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050405, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050505, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050600, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050605, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050700, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026050721, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051100, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051101, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051105, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051200, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051203, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051303, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051400, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051401, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051501, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051801, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051900, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026051903, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052001, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052107, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052201, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052503, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052701, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052800, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052805, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026052903, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026060523, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061005, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061201, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061203, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061501, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061503, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061601, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061603, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061705, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061801, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061803, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026061901, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026062201, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026062203, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026062305, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026062901, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026062903, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026063001, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070103, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070201, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070300, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070900, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070901, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026070922, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026071000, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026071300, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026071401, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026071423, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026071523, oci:ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026072015
Versions
116
Inspected
2 of 6 checks · 35%
Scored
2026-07-21 · rubric 1.0.0

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

6 checks2 clean4 not inspected

  • Injection surface

    unscannable25% of grade

    Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

    No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.

  • Supply chain

    pass25% of grade

    Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

    repository linkage verified

  • Credential hygiene

    unscannable15% of grade

    How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

    No source files, package manifest, or tool schemas were fetched; cannot assess credential handling.

  • Permission scope

    unscannable15% of grade

    Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

    No source files, package.json, or pyproject were fetched; cannot infer capability scope.

  • Version behavior

    pass10% of grade

    Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

    tool surface, capabilities, install scripts, and publisher unchanged vs prior version 1.0.2026071523 (patch bump); no rug-pull drift.

  • Transport config

    unscannable10% of grade

    Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

    local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.

Version history

Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.

VersionPublishedGradeScoreInspectedChange
v1.0.2026072015 · current2026-07-20 insufficient—2/6 · 35%±0
v1.0.20260715232026-07-15 insufficient—1/6 · 25%±0
v1.0.20260527012026-05-27 insufficient—1/6 · 25%±0
v1.0.20260401232026-04-01 insufficient—1/6 · 25%—