github Python analyzed eb7304c deep scan · partial (174/2,245 files)

ThreeMoonsLab/agents-shipgate

v1.0.0
github

The deterministic merge gate for AI-generated agent capability changes — a local-first, static Tool-Use Readiness review for MCP, OpenAPI, and SDK tool surfaces. Open-source CLI + GitHub Action.

maintainer
ThreeMoonsLab
licence
Apache-2.0
first seen
2026-06-04
last seen
2026-09-18
releases · 30d
3
short id

ThreeMoonsLab/agents-shipgate is an MCP server distributed on github, maintained by ThreeMoonsLab, tracked here since June 2026. It has shipped 28 releases (currently 1.0.0) and exposes 6 tools. Tools include shipgate.capabilities, shipgate.check, shipgate.explain, shipgate.handoff, shipgate.preflight, support.search_kb. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 6 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-18: 1 tool added.

full security breakdown →
tools 6
  • shipgate.capabilities
  • shipgate.check
  • shipgate.explain
  • shipgate.handoff
  • shipgate.preflight
  • support.search_kb
release cadence · 90d 7 releases
06-21 00:00 08-04 00:00 now
recent releases last 10
version date src
v1.0.0 2026-09-14 github
1.0.0 2026-09-14 pypi
preview-0.16.0+preview.20260903.gb61aca7 2026-09-03 github
v0.15.0 2026-07-08 github
0.15.0 2026-07-08 pypi
v0.14.0 2026-07-02 github
0.14.0 2026-07-02 pypi
v0.13.0 2026-06-12 github
0.13.0 2026-06-12 pypi
v0.12.0 2026-06-09 github

view all →