preflight

https://github.com/AutoRFP/mcp

content-library-contradictions

Caution

Score 93 / 100 · 4 files read · 0 critical, 0 high, 1 medium, 0 low findings

Report e2f1e611a249c41c · first scanned 2026-10-28 · scanned 1× · keyed to the exact package contents, so this link always shows this version

Subscores

credentials100
exfiltration92
execution100
injection100
obfuscation100
files100

100 is clean. Deductions come only from the cited findings below.

Findings

mediumCode contacts app.autorfp.ai, which the documentation never mentions
(package) · line 1 · rule M3
app.autorfp.ai

Permission surface

Network endpoints
app.autorfp.ai
Environment read
no named variables
Shell execution
no
Install hooks
none
Credential material
none referenced

Provenance

Source
GitHub
Repository
AutoRFP/mcp
Owner
AutoRFP
Stars
0
Forks
0
Repo created
2026-05-17
Last push
2026-05-18
License
MIT

Badge for the author

Preflight grade

[![Preflight: Caution](https://preflight.orbitaldeskllc.com/badge/e2f1e611a249c41c.svg)](https://preflight.orbitaldeskllc.com/b/e2f1e611a249c41c)

The badge links back to this report and updates if the package is re-scanned at a new version.

Watch this package

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.

Share this report: https://preflight.orbitaldeskllc.com/r/e2f1e611a249c41c