Audit MCP configs and statically verify npm packages and GitHub repositories before connecting agent tools.
Scoring was not performed