Skill audit report
visant-mcp-connect Audit report.
Connects and operates the Visant Labs MCP (requires a Visant Labs account): brand guidelines, mockups, creative studio, canvas, budgets, moodboard, PDF extraction. Use on "connect visant", "use the visant tools", "setup visant mcp", "conecta o visant", "usar as tools do visant", "extrair PDF pelo visant".
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
WARN48
81 GitHub stars
Stars/forks activity
WARN43
81 stars, 1 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
5d since push
License clarity
PASS86
MIT
README/SKILL.md completeness
PASS86
Metadata includes enough usage and workflow context
Dependency/runtime risk
WARN46
command execution surface, credential or environment access
Install availability
PASS92
npx skills add pedrojaques99/visant-skills-public --skill visant-mcp-connect
Install command safety
PASS92
standard package or runtime install path
Permission surface
FAIL22
secrets or environment access, shell or command execution
Repository evidence
PASS86
https://github.com/pedrojaques99/visant-skills-public/tree/main/visant-mcp-connect
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add pedrojaques99/visant-skills-public --skill visant-mcp-connect
Repository
88
https://github.com/pedrojaques99/visant-skills-public/tree/main/visant-mcp-connect
License
86
MIT
Maintenance
100
5d since push
AI review
55
The skill instructs passing the password via command line (`-p PASSWORD`), which can be visible in process listings; consider using an interactive prompt or environment variables.
README/SKILL.md completeness
86
Usable description available
Dependency risk
46
command execution surface, credential or environment access
Install command safety
92
standard package or runtime install path
Permission surface
22
secrets or environment access, shell or command execution
Stars/forks activity
43
81 stars, 1 forks; issue activity unavailable in current metadata
Adoption
68
81 GitHub stars
Warnings
- Dependency or permission surface needs review
- Permission surface may require sandboxing
- The skill instructs passing the password via command line (`-p PASSWORD`), which can be visible in process listings; consider using an interactive prompt or environment variables.
- The skill references other skills (e.g., [[visant-preflight]]) that are not included in this submission; ensure they are available or provide fallback instructions.
- Credentials are stored in plaintext at ~/.visant/credentials.json; consider recommending secure storage or encryption.
- Quality score needs review
- Permission surface needs review: secrets or environment access, shell or command execution
- GitHub adoption: 81 GitHub stars
- Stars/forks activity: 81 stars, 1 forks; issue activity unavailable in current metadata
- Dependency/runtime risk: command execution surface, credential or environment access
- Permission surface: secrets or environment access, shell or command execution
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
PaddleOCR
Turn any PDF or image document into structured data for your AI. A powerful, lightweight OCR toolkit that bridges the gap between images/PDFs and LLMs. Supports 100+ languages.
83K Stars · Audit report
Markitdown
Python tool for converting files and office documents to Markdown.
156K Stars · Audit report
Stirling PDF
#1 PDF Application on GitHub that lets you edit PDFs on any device anywhere
81K Stars · Audit report