Evaluation report
Warnings@opentabs-dev/create-plugin · mcpc8bff81· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/opentabs-dev/opentabs @ c8bff81
Manifest detected
kind=mcp slug=opentabs-dev-create-plugin · path=platform/create-plugin · source=package.json
Slug is URL-safe
"opentabs-dev-create-plugin" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for mcp/opentabs-dev-create-plugin
Version is semver
0.0.114
Documentation
3 passed1 warningREADME is present and substantialwarn
README present but its contents couldn't be read this scan
Transient fetch issue — re-run the eval to grade the README's substance.
Description quality
17 words · 97 chars — "Scaffold a new OpenTabs plugin — create MCP tools that interact with web apps th…"
Tags / topics declared
9 total — opentabs, mcp, modelcontextprotocol, ai-agent, browser, chrome-extension (+3)
Homepage / docs URL declared
no homepage declared (registry will use the repo URL) — info-only, not blocking
Safety
3 passedDependencies: known vulnerabilities
OSV.dev clean — 0 high/critical across 3 deps
LICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
3 passed2 warningsScan incompletewarn
GitHub returned 502 Detected 52 artifacts before stopping.
Check the portal server logs for the underlying network error.
MCP: @modelcontextprotocol/sdk in dependencieswarn
No @modelcontextprotocol/sdk dependency declared
Run `npm i @modelcontextprotocol/sdk` so consumers can audit your stack.
MCP: launch path
bin: create-opentabs-plugin
MCP: ESM package
"type": "module"
MCP: server surface
0 tools
Behavioral
This artifact hasn't produced behavioral results yet: the evaluation sandbox couldn't run it (it may need credentials we don't provide, or a build our environment doesn't support). That's a limitation of our environment, not a verdict on the artifact.