{"name":"io.github.qingxuantang/tar-engine","slug":"qingxuantang-tar-engine","title":"TAR Engine","description":"Audit AI skill safety before you ship. Static, semantic, adversarial, supply chain scans.","url":"https://mcp.market/server/qingxuantang-tar-engine","rating":null,"grade":"B","score":78,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":24,"stars":2,"forks":0,"downloads_week":19,"last_push_at":"2026-07-23T03:35:14.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/qingxuantang/tar-engine","website":"https://tarai.dev","version":"0.3.3","remotes":[],"packages":[{"registryType":"pypi","identifier":"tar-engine","version":"0.3.3","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"description":"Install the tar-engine wheel that provides the tar-engine-mcp executable.","value":"tar-engine","type":"positional","name":"--from"},{"description":"Run the MCP server entry point exposed by the tar-engine wheel.","value":"tar-engine-mcp","type":"positional","name":"tar-engine-mcp"}],"environmentVariables":[{"description":"Override the audit backend. Default is the hosted playground at https://tarai.dev. Set to http://localhost:8765 (or your own tar-engine deployment) to self-host and keep SKILL.md content on your machine.","name":"TAR_ENGINE_URL"},{"description":"OpenAI API key that unlocks the semantic LLM and adversarial prompt-fuzz layers. Static and supply-chain layers run without it.","isSecret":true,"name":"TAR_ENGINE_BYOK_OPENAI_KEY"},{"description":"Anthropic API key alternative to the OpenAI key for the semantic and adversarial layers.","isSecret":true,"name":"TAR_ENGINE_BYOK_ANTHROPIC_KEY"}]}],"tools":[],"scan":{"score":78,"grade":"B","scanned_at":"2026-09-25T12:09:32.496Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-25T12:09:32.368Z","components":{"code":{"score":25,"max":25,"notes":["5 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 64 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"pypi","identifier":"tar-engine","version":"0.3.3","found":true,"weeklyDownloads":19,"license":"Apache-2.0","dependencyCount":2,"publishedAt":"2026-07-23T03:32:55.136326Z","repositoryUrl":"https://github.com/qingxuantang/tar-engine"}],"repo":{"found":true,"owner":"qingxuantang","repo":"tar-engine","archived":false,"pushedAt":"2026-07-23T03:35:14Z","stars":2,"forks":0,"openIssues":8,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/18418339?v=4","ownerCreatedAt":"2016-04-12T10:22:26Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/18418339?v=4&s=128","source":"github"},"presence":{"stars":2,"forks":0,"downloadsWeek":19,"license":"Apache-2.0","lastPushAt":"2026-07-23T03:35:14.000Z","score":24}}}},"grade_history":[],"reviews":[]}