jorgex-stackBLOCK
Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Shared configuration for Claude Code, Codex CLI, OpenCode v2 and official Pi: eleven local skills, six subagents and native integrations, applied through each runtime's own mechanisms. Stack does not install a second Pi runtime and keeps no private provider contracts or receipts.
Quick start
You need Node >= 22.5 and pnpm. Install the runtimes you want through their official channels first; Stack configures them, it does not install them.
Run it (recommended)
pnpm dlx jorgex-stack@latest
This is the only command most people need. It downloads the latest published release into pnpm's temporary cache and opens the interactive menu. Nothing is installed globally and nothing is added to your PATH, so there is no old copy to update or remove later.
pnpm reuses that download for one day (dlxCacheMaxAge), so repeated runs start immediately and work offline. After a day, the next run checks the registry again and picks up a new release if there is one.
Install it as a permanent command (optional)
pnpm add -g jorgex-stack@latest
This installs a global jorgex-stack command; run jorgex-stack to open the same menu. The copy stays at the version you installed: the menu's Actualizar action updates your runtimes' configuration, not Stack itself. To update Stack, run the same pnpm add -g jorgex-stack@latest again. To remove it, run pnpm remove -g jorgex-stack.
Use a single package manager. A second global copy installed with npm or another tool can come first in your PATH and run an older version without any warning.
What opens
Both commands open the same menu, in Spanish. It takes no subcommands or flags (not even --version or --yes) and has no headless mode. Without an interactive terminal it changes no files and does not wait for input. The distribution version lives in package.json and in the registry, not in an installer alias.
759271c31905OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add jorgex-stack -- npx -y [email protected]
{
"mcpServers": {
"jorgex-stack": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
probe | read | Permission fixture |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (8 observation(s))
- Network
- declared (2 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (20)
["~/.ssh", "deny"],
["~/.aws", "deny"],
"Codex: fresh config never asks for approval and runs in the provider sandbox with home-wide writes and network. Only ~/.ssh and ~/.aws are denied; .env files, .npmrc and loose keys are NOT protected.
"*.git-credentials",
"*id_rsa*",
done.wav
silent.wav
const standaloneServer = "http://127.0.0.1:4096";
streamable-http
new Function("module", "exports", "require", "VERSION", "truncateToWidth", "visibleWidth", compiled)(import { upsertTomlSection } from "../../src/lib/filemerge.js";import type { RuntimeId } from "../../src/adapters/types.js";import type { AgentModelChoices } from "../../src/lib/agent-model.js";expect(spaced.kind === "write" && spaced.content).toContain("@../../shared\\ with\\ spaces/AGENTS.md");Para OpenCode v2, al entrar en **Modelo** o **Esfuerzo / variante** se ofrece primero la URL observada en el registro nativo de solo lectura: `$XDG_STATE_HOME/opencode/service.json`, o `~/.local/state
openCodeServerAddress: vi.fn(() => ({ url: "http://127.0.0.1:49374" })),expect(question.initialValue).toBe("http://127.0.0.1:49374");return "http://127.0.0.1:49375";
@clack/prompts, @types/node, tsup, typescript
- **BK01** — [`design-tokens/community-group (tree)`](https://github.com/design-tokens/community-group/tree/882ebd6716abef9a46d8ef5fb12e82009d6cee2e) (SHA pinned `882ebd6716abef9a46d8ef5fb12e82009d6ce
Gates applied: no_behavioural_pass.
759271c31905full audit observations/trust-audit/mcp-server/jorgehn98__jorgex-stack.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 759271c31905 | BLOCK | D | 69 | first audit |
Questions
What is the jorgex-stack MCP server?
Harness multi-agente portable: instala la config JorgeX (agentes, skills, hooks, Engram, MCPs) en Claude Code, Codex CLI y OpenCode
What tools does jorgex-stack expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is jorgex-stack safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 5 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does jorgex-stack need?
No credential environment variables were found in its source, so it appears to need none.
How does jorgex-stack run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as jorgex-stack at 2.0.21.
How current is this page?
The grade is for one exact copy of the source (759271c31905), read on 2026-10-11. The repository is watched and re-audited when it changes.