preflight

https://github.com/Aguantar/vibescan-mcp-server

vibescan-mcp-server

Caution

Score 91 / 100 · 9 files read · 0 critical, 0 high, 1 medium, 1 low findings

Report 3ba09da153bc536d · first scanned 2026-10-28 · scanned 3× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials100
exfiltration92
execution100
injection100
obfuscation98
files100

100 is clean. Deductions come only from the cited findings below.

Findings

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions
(package) · line 1 · rule M3
static.modelcontextprotocol.io
low1 binary file(s) were not parsed (static text analysis only)
(package) · line 1 · rule L3
1 binary files

Permission surface

Network endpoints
github.comstatic.modelcontextprotocol.io
Environment read
no named variables
Shell execution
no
Install hooks
none
Credential material
none referenced

Provenance

Source
GitHub
Repository
Aguantar/vibescan-mcp-server

Badge for the author

Preflight grade

[![Preflight: Caution](https://preflight.orbitaldeskllc.com/badge/3ba09da153bc536d.svg)](https://preflight.orbitaldeskllc.com/b/3ba09da153bc536d)

The badge links back to this report and updates if the package is re-scanned at a new version.

Watch this package

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.

Share this report: https://preflight.orbitaldeskllc.com/r/3ba09da153bc536d