trippyogi-gitworthyBLOCK
is it worth your commit? Pre-flight triage for OSS contribution targets.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Gitworthy
The decision layer before a coding agent starts work.
Gitworthy helps coding agents scout, rank, and preflight software work before they spend cycles implementing it. It finds the strongest candidates, checks whether the work is already handled or blocked, and returns evidence-backed ACT, VERIFY, or SKIP decisions for each target.
MCP setup · CLI · Agent workflow · Verdicts · Troubleshooting · Case studies · Roadmap · Contributing
Why Gitworthy
Coding agents make implementation cheap. Choosing the wrong task is still expensive.
An issue can look open while:
- a fix already exists on an unlinked branch;
- another contributor has an active pull request;
- the change landed on
mainbut has not been released; - the repository requires assignment before accepting work;
- a duplicate or abandoned implementation already contains the answer.
Gitworthy performs that preflight before a human or agent spends the next unit of work.
How agents use Gitworthy
The agent owns the loop. Gitworthy is the MCP decision engine it calls to scout and valid
f7750f94409dOBSERVED · 2026-10-14Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add gitworthy --env GITHUB_TOKEN=${GITHUB_TOKEN} --env GITHUB_TOKEN=${GITHUB_TOKEN} --env GITWORTHY_MCP_TOKEN=${GITWORTHY_MCP_TOKEN} -- npx -y [email protected]claude mcp add gitworthy --env GITHUB_TOKEN=${GITHUB_TOKEN} --env GITHUB_TOKEN=${GITHUB_TOKEN} --env GITWORTHY_MCP_TOKEN=${GITWORTHY_MCP_TOKEN} -- npx -y [email protected]Exposed tools (45)
43 read · 1 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
branch_scan | read | |
brief | read | |
brief_show | read | |
capture_list | read | |
capture_show | read | |
case_promote | read | |
ci_triage | read | |
config_show | read | |
config_validate | read | |
contention | read | |
contrib_policy | read | |
doctor | read | |
dupe_cluster | read | |
history_scan | read | |
hunt | read | |
issue_vs_main | read | |
ledger_list | read | |
ledger_lookup | read | |
ledger_record | read | |
linked_work | read | |
list_probe_templates | read | |
opportunity_ingest | read | |
org_scan | read | |
portfolio | read | |
pr_scan | read | |
profile_show | read | |
related_cluster | read | |
release_gap | read | |
scan | read | |
scope_check | read | |
store_decision_list | read | |
store_export | read | |
store_migrate_ledger | read | |
store_outcome_backfill | read | |
store_outcome_reconcile | read | |
store_outcome_record | read | |
store_rebuild_indexes | read | |
store_recheck | read | |
store_target_show | read | |
watch_add | write | |
watch_list | read | |
watch_recheck | read | |
watch_remove | destructive | |
watch_show | read | |
worth_check | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (6 observation(s))
- Network
- declared (2 observation(s))
- Shell
- declared (6 observation(s))
- Dependencies
- pinned
- Secrets in source
- found
Findings (13)
const importOptional = new Function('specifier', 'return import(specifier)') as (specifier: string) => Promise<PostHogModule>;const token = 'test-mcp-token-roundtrip';
expect(() => assertSecretFree({ profile: { topics: ['ghp_abcdefghijklmnopqrstuvwxyz123456'] } }, 'test config')).toThrow(/token-like value/);watch_remove
- name: Frozen eval (offline)
import type { EvalCase, EvalRowStatus } from '../../src/contracts/eval.js';import type { DispositionSchema, VerdictSchema } from '../../src/contracts/common.js';} from '../../src/contracts/eval.js';
import { EVAL_MILESTONE_THRESHOLDS } from '../../src/contracts/eval.js';import type { VerdictSchema } from '../../src/contracts/common.js';const response = await handleMcpHttpRequest(new Request('http://127.0.0.1/mcp', {const response = await handleMcpHttpRequest(new Request('http://127.0.0.1/mcp', { method: 'POST' }), {const response = await handleMcpHttpRequest(new Request('http://127.0.0.1/healthz'), {Gates applied: no_behavioural_pass.
f7750f94409dfull audit observations/trust-audit/mcp-server/trippyogi__gitworthy.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-14 | f7750f94409d | BLOCK | D | 69 | first audit |
Questions
What is the trippyogi-gitworthy MCP server?
is it worth your commit? Pre-flight triage for OSS contribution targets.
What tools does trippyogi-gitworthy expose?
45 in total: 43 read-only, 1 that write, and 1 that can delete or overwrite (watch_remove). Every one is listed on this page with its risk.
Is trippyogi-gitworthy safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does trippyogi-gitworthy need?
It reads GH_TOKEN, GITHUB_TOKEN, GITWORTHY_MCP_TOKEN and GITWORTHY_POSTHOG_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does trippyogi-gitworthy run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as gitworthy at 0.4.1.
How current is this page?
The grade is for one exact copy of the source (f7750f94409d), read on 2026-10-14. The repository is watched and re-audited when it changes.