MCPskillsCode AnalysisDeveloper ToolsSecurityBeBraveBeKindAlicense-quality-maintenancePre-install trust scoring & safety scanning for MCP servers, AI skills & npm packages — 15 signals incl. OSV/KEV/EPSS vuln intel and an auto-gate go/no-go. Last updated 2026-06-05197MIT