Verune

MCP server

daming-skillgain

你的 Skill 到底有没有用?跑一次就知道——用真实任务做对照测试,看它在每个模型上是帮忙还是拖后腿。 | Measure whether a skill actually helps, per model, via paired with/without experiments and blind judge review.

Version
main
Analysed
Last observed

What the code does

What does this mean?

These are capabilities our static analysis found in the latest published version. They describe what the code can do, not whether it is malicious: many tools need shell access or the network to do their job. Use them to decide what to check before installing.

  • Runs shell commands Code that starts system commands on the machine it runs on.
  • Evaluates code at runtime Code that builds and runs code while it executes.
  • Runs an AI coding agent unsupervised Code that starts an AI coding agent with its approval prompts switched off.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.

Risk

Sign in to see this tool's overall risk level and what drives it. Free.

Sign in to see the risk level

Coverage

What does this mean?

How much of the tool we could inspect: listed only, downloaded, partly analysed, or fully analysed. Less coverage means fewer findings can be trusted to be complete.

Complete static analysis

How coverage is measured

Detailed report

What does this mean?

The full report lists every finding with the file it came from, and every change we observed between versions.

4 findings from automated static analysis of the latest version, with severities and explanations.

Sign in to view detailed report

Using this tool across your team? We can assess your whole inventory.

Request an inventory assessment