{"name":"io.github.eliottreich/taskbounty-check","slug":"eliottreich-taskbounty-check","title":null,"description":"Local GitHub Actions/CI maintenance check (action pinning, token perms). Not a full security audit.","url":"https://mcp.market/server/eliottreich-taskbounty-check","rating":null,"grade":"B","score":78,"certified":false,"status":"active","category":"devtools","tags":["devtools","security"],"presence":{"score":19,"stars":2,"forks":0,"downloads_week":52,"last_push_at":"2026-06-21T14:14:59.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/eliottreich/taskbounty-check","website":null,"version":"0.1.6","remotes":[],"packages":[{"registryType":"npm","identifier":"taskbounty-check","version":"0.1.6","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional","valueHint":"mcp"}]}],"tools":[{"name":"explain_finding","description":"Explain what a finding means and why it matters, in plain language. Pass the rule id (e.g. unpinned-action) or a category. No network, no file access.","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_fix_plan","description":"Return a step-by-step fix plan as TEXT for a given rule (and optionally a local repo path for context). It NEVER modifies files; the user applies changes explicitly.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_repo","description":"Scan a LOCAL repository for GitHub Actions + CI maintenance hygiene. Reads only workflow files on disk; makes no network requests and uploads nothing. Returns a text summary of findings by category with file/line and suggested fixes.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":78,"grade":"B","scanned_at":"2026-09-26T21:20:27.746Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T21:20:27.664Z","components":{"code":{"score":25,"max":25,"notes":["11 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 97 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"taskbounty-check","version":"0.1.6","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-06-21T13:28:12.423Z","repositoryUrl":"git+https://github.com/eliottreich/taskbounty-check.git","weeklyDownloads":52}],"repo":{"found":true,"owner":"eliottreich","repo":"taskbounty-check","archived":false,"pushedAt":"2026-06-21T14:14:59Z","stars":2,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/269783089?v=4","ownerCreatedAt":"2026-03-20T17:33:59Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":2,"forks":0,"downloadsWeek":52,"license":"MIT","lastPushAt":"2026-06-21T14:14:59.000Z","score":19}}}},"grade_history":[],"reviews":[]}