Atlas / MCP servers / sktkkoo / Yorishiro

YorishiroBLOCK

Name: Yorishiro
Author: sktkkoo

mcp/sktkkoo/yorishiro

MCP server by sktkkoo · ai · ai agent · ai agents · Audited 2026-10-07

⚑ Report / re-scan Source ↗

A terminal that gives AI a body and a living space.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

20 16r · 4w · 0d

Transport

streamable-http

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

yorishiro

A terminal your AI inhabits

Yorishiro is a new kind of terminal that gives your AI a body — and a sense of presence.

When the agent is deep in thought, its gaze wanders. When an error appears, its face reacts immediately. When it needs your approval, the room's lighting lets you know. During a long-running process, instead of a spinner, someone is standing there.

In Yorishiro, the inhabitant can reshape its environment in real time: changing the lighting, switching scenes, and rearranging the UI. You can operate that same environment directly. The inhabitant and the user share a single environment.

Yorishiro is also self-modifiable. Nearly everything beyond the core can be persistently extended or changed through units called packs. Through conversation with the inhabitant, those packs can be rewritten and saved. This applies not only to scenes and UI, but also to the inhabitant's personality and reactions. Changes take effect immediately; if you don't like the result, one click reverts it.

Yorishiro is not an environment for enhancing AI capabilities, but one in which an AI feels present beside you — a Presence Harness.

The time we spend working with AI will only grow longer. There is some

Read from source at commit 0559846a15e1OBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add yorishiro --env SECRET=${SECRET} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "yorishiro": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "SECRET": "${SECRET}"
      }
    }
  }
}

Exposed tools (20)

16 read · 4 write · 0 destructive.

Tool	Risk	Description
`music_fade_volume`	read	指定時間をかけて音量を変更する
`music_library_summary`	read	ライブラリの曲数・アーティスト・代表候補を返す
`music_next`	read	次の曲にスキップする
`music_now_playing`	read	現在再生中の曲の情報を取得する(タイトル・アーティスト・アルバム・再生位置)
`music_pause`	read	再生を一時停止する
`music_play`	read	Apple Music で再生を開始する
`music_play_track`	read	検索結果の track id(persistent ID)を指定して再生する
`music_playlists`	read	Apple Music のプレイリスト一覧を取得する
`music_previous`	read	前の曲に戻る
`music_queue`	read	music-shelf 内部キューに曲を追加・表示・削除する
`music_repeat`	read	リピート状態を取得・設定する
`music_search`	read	曲名・アーティスト・アルバムを検索して候補を返す
`music_search_play`	read	検索語に一致する最初の曲を再生する
`music_shuffle`	read	シャッフル状態を取得・設定する
`music_stop_after`	write	指定時間後、または現在の曲の終了付近で再生を止める
`music_volume`	read	音量を取得・設定する(0-100)
`noted_add`	write	add a note
`pomodoro_start`	write	Start a pomodoro session with configurable work/break durations
`pomodoro_status`	read	Get current pomodoro status (phase, round, remaining time)
`pomodoro_stop`	write	Stop the current pomodoro session

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (7 observation(s))
Network: declared (8 observation(s))
Shell: declared (3 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (25)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

src/sdk/context.d.ts:691

exec(command: string, options?: ExecOptions): Promise<ExecResult>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

src-tauri/src/lib.rs:3341

assert!(!has_vrm_extension(Path::new("/home/user/.ssh/id_rsa")));

Why it matters. touches a credential store

MEDIUMInventory / provenance · inv.binary · CWE-1104

src-tauri/icons/icon.icns

icon.icns

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/capture-motion-lab.mjs:25

process.env.YORISHIRO_MOTION_LAB_URL || "http://127.0.0.1:1437/motion-lab.html",

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/capture-source-motion-lab.mjs:11

process.env.YORISHIRO_SOURCE_LAB_URL || "http://127.0.0.1:1437/source-motion-lab.html",

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/review-motion-quality.mjs:140

const url = `http://127.0.0.1:${port}/motion-quality-lab.html?label=${encodeURIComponent(label)}&seed=${seed}`;

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

src-tauri/src/agent_setup.rs:393

let expected = "導入中... 🐈⬛\n完了 ✅";

LOWCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/lib/pack-checker.test.mjs:340

["assets/overlay.html", "<div><script>eval(atob('ZmV0Y2g='))</script></div>"],

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

bundled-packs/ui/yorishiro-settings/pack-workbench.test.tsx:6

import { getStrings } from "../../../src/i18n/strings";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

bundled-packs/ui/yorishiro-settings/ui.test.ts:2

import { getStrings, resolvePackRepairPrompt } from "../../../src/i18n/strings";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

bundled-packs/ui/yorishiro-settings/ui.test.ts:3

import { applyCurrentProjectSceneSelection } from "../../../src/runtime/project-context/project-context";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

bundled-packs/ui/yorishiro-settings/ui.test.ts:4

import { EMPTY_CONFIG, KNOWN_AGENT_IDS } from "../../../src/runtime/user-pack-loader/config";

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

bundled-packs/ui/yorishiro-settings/ui.tsx:42

import { changeStrings, getStrings, type UiStrings } from "../../../src/i18n/strings";

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

docs/decisions/motion-orchestration.md:57

The lab is at `http://127.0.0.1:1437/motion-lab.html`. It compares the same Yori avatar, camera and lighting with the library disabled/enabled and lets a reviewer exercise semantic gestures. It is a d

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

docs/decisions/source-motion-review.md:64

`http://127.0.0.1:1437/source-motion-lab.html`.

LOWObfuscation / stealth · obf.decode_call · CWE-506, CWE-94

scripts/lib/pack-checker.test.mjs:340

["assets/overlay.html", "<div><script>eval(atob('ZmV0Y2g='))</script></div>"],

LOWObfuscation / stealth · obf.decode_then_exec · CWE-506, CWE-94

scripts/lib/pack-checker.test.mjs:340

atob( ... >eval(

Why it matters. decodes a payload and executes it

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@pixiv/three-vrm, @pixiv/three-vrm-animation, @react-three/drei, @react-three/fiber, @react-three/postprocessing, @tauri-apps/api, @tauri-apps/plugin-dialog, @tauri-apps/plugin-opener

Why it matters. 37 dependency range(s) float

Fix. pin exact versions or ship a lockfile