2 checks that ran failed — permission scope and version behavior — so this release can’t be trusted as-is.
- Publisher
- io.github.yonatangross
- Repository
- github.com/yonatangross/orchestkit
- Install
- oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.37.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.37.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.38.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.39.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.40.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.41.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.41.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.42.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.42.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.42.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.43.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.44.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.44.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.45.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.46.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.47.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.47.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.47.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.47.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.48.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.48.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.48.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.49.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.50.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.51.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.52.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.53.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.54.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.55.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.55.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.55.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.56.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.57.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.58.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.59.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.60.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.60.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.62.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.62.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.63.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.63.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.63.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.64.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.65.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.65.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.65.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.66.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.67.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.68.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.68.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.68.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.69.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.69.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.70.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.70.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.70.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.70.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.71.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.72.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.73.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.74.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.75.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.76.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.77.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.77.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.79.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.80.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.80.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.80.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.82.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.83.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.83.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.4, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.5, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.10, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.7, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.8, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.9, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.85.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.0.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.0.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.0.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.1.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.1.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:8.84.6, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.2.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.2.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.3.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.4.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.5.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.5.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.5.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.5.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.5.4, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.6.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:9.7.0, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.1, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.2, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.3, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.4, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.5, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.6, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.7, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.8, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.9, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.10, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.11, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.12, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.13, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.14, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.15, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.16, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.17, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.18, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.19, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.20, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.21, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.22, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.23, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.24, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.26, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.28, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.29, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.30, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.31, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.32, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.33, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.34, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.35, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.36, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.37, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.38, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.39, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.40, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.41, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.42, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.43, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.44, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.45, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.46, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.47, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.48, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.49, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.50, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.51, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.52, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.53, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.54, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.55, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.56, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.57, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.58, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.59, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.60, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.61, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.62, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.63, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.64, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.65, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.66, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.67, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.68, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.69, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.70, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.71, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.72, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.73, oci:ghcr.io/yonatangross/orchestkit-docs-mcp:10.0.0-alpha.74
- Versions
- 176
- MCP revision
- 2025-11-25 · superseded
- Inspected
- 6 of 6 checks · 100%
- Scored
- 2026-09-04 · rubric 1.0.0
What we checked
Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.
6 checks3 clean3 flagged
Injection surface
pass25% of gradeTool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).
Scanned 10 text field(s); no instruction-injection patterns found. PASS = no static red flag. A server can serve different tool descriptions at runtime (the rug-pull class), which static scanning cannot see.
Supply chain
warn25% of gradePackage provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.
install hook "prepare" present and not a recognized benign build command
Credential hygiene
pass15% of gradeHow the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.
No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.
Permission scope
fail15% of gradeDeclared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.
HIGH: shell/exec capability is incongruent with a read-only declared purpose (tools look like lookup/read-only but source imports command execution). discloses shell/exec capability: pyproject declares an exec-oriented dependency (pexpect/fabric/invoke) Capability DISCLOSURE, not a verdict: static analysis sees the primitive is present and reachable, not whether its use is attacker-controlled.
Version behavior
fail10% of gradeDiff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).
vs prior 10.0.0-alpha.72 (other bump): new hardcoded outbound host/BCC destination(s): app.tavily.com, github.com.
Transport config
pass10% of gradeRemote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.
remote endpoint "https://orchestkit.yonyon.ai/api/mcp" uses TLS (https); remote endpoint uses OAuth (strongest auth mode)
Version history
Each release plotted by grade against the safe line at B. A version that sinks below the line has lost its trusted standing — the shape of a rug-pull.
safe line · B
B→C
C→B
B→D
D→C
C→B
B→C
C→A
A→C
v8.47.0v8.68.3v8.69.0v8.77.0v8.79.0v8.80.1v8.80.3v8.82.1v8.83.1v8.84.5v8.84.10v9.0.1v9.1.1v9.2.0v9.2.1v9.4.0v9.5.0v9.5.3v9.6.0v9.7.0v10.0.0-alpha.1v10.0.0-alpha.9v10.0.0-alpha.16v10.0.0-alpha.24v10.0.0-alpha.29v10.0.0-alpha.33v10.0.0-alpha.34v10.0.0-alpha.35v10.0.0-alpha.37v10.0.0-alpha.40v10.0.0-alpha.43v10.0.0-alpha.45v10.0.0-alpha.49v10.0.0-alpha.52v10.0.0-alpha.57v10.0.0-alpha.60v10.0.0-alpha.61v10.0.0-alpha.63v10.0.0-alpha.65v10.0.0-alpha.67v10.0.0-alpha.68v10.0.0-alpha.72v10.0.0-alpha.74
| Version | Published | Grade | Score | Inspected | Change |
|---|---|---|---|---|---|
| v10.0.0-alpha.74 · current | 2026-09-04 | C | 62.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.72 | 2026-09-02 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.68 | 2026-09-01 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.67 | 2026-09-01 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.65 | 2026-08-30 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.63 | 2026-08-30 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.61 | 2026-08-26 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.60 | 2026-08-25 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.57 | 2026-08-25 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.52 | 2026-08-23 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.49 | 2026-08-22 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.45 | 2026-08-21 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.43 | 2026-08-20 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.40 | 2026-08-18 | C | 72.5 | 5/6 · 90% | ±0 |
| v10.0.0-alpha.37 | 2026-08-17 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.35 | 2026-08-16 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.34 | 2026-08-14 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.33 | 2026-08-14 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.29 | 2026-08-13 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.24 | 2026-08-11 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.16 | 2026-08-11 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.9 | 2026-08-10 | C | 72.5 | 6/6 · 100% | ±0 |
| v10.0.0-alpha.1 | 2026-08-09 | C | 62.5 | 6/6 · 100% | A→C in v10.0.0-alpha.1 |
| v9.7.0 | 2026-08-05 | A | 100 | 5/6 · 85% | C→A in v9.7.0 |
| v9.6.0 | 2026-08-03 | C | 72.5 | 6/6 · 100% | ±0 |
| v9.5.3 | 2026-08-03 | C | 72.5 | 6/6 · 100% | ±0 |
| v9.5.0 | 2026-08-02 | C | 72.5 | 6/6 · 100% | ±0 |
| v9.4.0 | 2026-08-01 | C | 72.5 | 6/6 · 100% | ±0 |
| v9.2.1 | 2026-07-28 | C | 72.5 | 5/6 · 90% | ±0 |
| v9.2.0 | 2026-07-28 | C | 62.5 | 6/6 · 100% | B→C in v9.2.0 |
| v9.1.1 | 2026-07-26 | B | 100 | 4/6 · 75% | C→B in v9.1.1 |
| v9.0.1 | 2026-07-26 | C | 72.5 | 5/6 · 90% | ±0 |
| v8.84.10 | 2026-07-23 | C | 72.5 | 5/6 · 90% | ±0 |
| v8.84.5 | 2026-07-22 | C | 72.5 | 5/6 · 90% | ±0 |
| v8.83.1 | 2026-07-20 | C | 62.5 | 5/6 · 90% | ±0 |
| v8.82.1 | 2026-07-20 | C | 72.5 | 6/6 · 100% | ±0 |
| v8.80.3 | 2026-07-20 | C | 62.5 | 5/6 · 90% | D→C in v8.80.3 |
| v8.80.1 | 2026-07-19 | D | 52.5 | 6/6 · 100% | B→D in v8.80.1 |
| v8.79.0 | 2026-07-18 | B | 87.5 | 3/6 · 55% | ±0 |
| v8.77.0 | 2026-07-16 | B | 87.5 | 3/6 · 55% | C→B in v8.77.0 |
| v8.69.0 | 2026-07-10 | C | 72.5 | 6/6 · 100% | ±0 |
| v8.68.3 | 2026-07-10 | C | 62.5 | 5/6 · 90% | B→C in v8.68.3 |
| v8.47.0 | 2026-06-15 | B | 100 | 4/6 · 75% | — |