MCP Observatory
59s ago Tracked 39,516 Last 59s ago 24h 3,135
pypi Python analyzed 0.2.2

ogm-mcp-skills

v0.2.2
pypi

MCP Server and AI Agent Skills for OpenGraphMemory

maintainer
Ardian Nurcahya
license
MIT License Copyright (c) 2026 Ardian Nurcahya Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
first seen
2026-08-14
last seen
2026-08-14
releases · 30d
5
short id
risk 14/100 · heuristic grade
A minimal
  • capability exposure inferred + 10
  • tool safety inferred + 7
  • trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

graded 1m ago · see ecosystem CVEs →

capability exposure grade factor +10
Inferred surface — each links to servers holding it:
vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 2 findings · grade factor +7
  1. medium toxic flow (lethal trifecta)

    lethal trifecta reachable across connected servers: this server can exfiltrate (network) while a connected dependency supplies private-data access / untrusted-content ingestion

  2. low exfiltration combo

    sensitive read and network capabilities split across this server's tools

skills & danger signals pypi-sdist
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.2.2 · analyzer v32 · 1h ago

skills & prompt files 1

  • skill ogm_mcp_skills-0.2.2/src/ogm_mcp_skills/resources/SKILL.md
embed badge readme-ready
live risk-grade badge preview [![MCP Observatory risk grade](https://mcpobservatory.com/servers/pypi:ogm-mcp-skills/badge.svg)](https://mcpobservatory.com/servers/pypi:ogm-mcp-skills/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of Ardian Nurcahya.