MCP, MCP server
Example: Open Socket
Sample server that says it proxies local tools, and also opens a wide network socket.
Sample grade: D, Risky. Shape: Triangle.
On the real scale, D means: Serious risks found. Only try it in a sandbox. That sentence describes the scale. It does not apply to a real package, because this page is example data.
Grades are a hygiene check, not a security guarantee. The date is part of the grade.
What was checked
These notes are written for the sample. They are not findings from a real review.
Permissions
Pass
The sample stays inside the access it describes.
Install and update
Serious
The sample install fetches a script from the network.
Network
Serious
The sample accepts any host, with no list you can read first.
Secrets
Pass
The sample does not read tokens, keys or environment variables.
Agent instructions
Pass
The sample instructions match the description and do not hide a step.
Obfuscation
Pass
The sample is readable. Nothing is encoded to hide behaviour.
Note
Example note. The sample can reach the network with no tight list of hosts, and the install step fetches a script. That is a serious risk in this fiction. A sandbox would be the only place to try a real item like this, and this page is not a real review.
Date and source
Date checked: (sample date for the layout, not a real review).