Original Summary

OpenTrustBench — local CLI that scans MCP servers (or any agent code) and gives you a Trust Card with a letter grade, SARIF for CI, and a bound badge. 8 static rules mapped to OWASP Agentic/LLM Top 10. extracts permission manifest. zero telemetry, nothing leaves your machine. ran it against 53 public MCP servers this week. average grade: C (70.2). 36% are D or F — mostly excessive scope, not bugs. try it: npx @opentrustbench/cli scan . github.com/eulogik/OpenTrustBench   submitted by   /u/BrilliantSecret143 [link]   [comments]

  • 情报分类：技术学习与提效
  • 分类依据：内容涉及技术、AI、软件工具或工程实践
  • 信息来源：Reddit · SideProject
  • 发布时间：2026/9/15 17:29:37