Is BenchBoss MCP server safe?

Probably. Read the findings first.

C57/100grade C

Use with care. Some checks failed or could not be verified.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 medium

Code scan8 source files scanned20/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancerepository not readable: repo not found3/15
Maintainer identityno repository or website to verify2/10

mediumeval / new Function usedexec.eval

dist/index.js: …eCode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…

Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

SlopScore
Browse, search and scan a public leaderboard of AI-generated GitHub repos.
not reviewed
Growing
A
Vercelpycheck
Scan a public GitHub repo for known Vercel Python-runtime deploy footguns.
More from www.edgethirteen.com →
not reviewed
New
C
GitHub
Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
not reviewed
Established
A