preflight

https://github.com/Alkilo-do/orita-mcp

orita-mcp

Clean

Score 96 / 100 · 8 files read · 0 critical, 0 high, 0 medium, 2 low findings

Report 96535236b51dbad4 · first scanned 2026-10-28 · scanned 3× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials98
exfiltration100
execution100
injection100
obfuscation98
files100

100 is clean. Deductions come only from the cited findings below.

Findings

low1 binary file(s) were not parsed (static text analysis only)
(package) · line 1 · rule L3
1 binary files
lowReads named environment variables (normal for API keys; listed in the permission summary)
orita_mcp/server.py · line 16 · rule L1
FastMCP BASE_URL = os.environ.get("ORITA_BASE_URL", "https://orita.online").rstrip("/") API_KEY = os.environ.get("ORITA_API_KEY",

Permission surface

Network endpoints
github.comimg.shields.ioorita.onlinepypi.orgregistry.modelcontextprotocol.io
Environment read
ORITA_API_KEYORITA_BASE_URL
Shell execution
no
Install hooks
none
Credential material
Reads named environment variables (normal for API keys; listed in the permission summary)

Provenance

Source
GitHub
Repository
Alkilo-do/orita-mcp
Owner
Alkilo-do
Stars
0
Forks
0
Repo created
2026-07-26
Last push
2026-07-31
License
MIT

Badge for the author

Preflight grade

[![Preflight: Clean](https://preflight.orbitaldeskllc.com/badge/96535236b51dbad4.svg)](https://preflight.orbitaldeskllc.com/b/96535236b51dbad4)

The badge links back to this report and updates if the package is re-scanned at a new version.

Watch this package

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.

Share this report: https://preflight.orbitaldeskllc.com/r/96535236b51dbad4