{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T16:24:49.838Z","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp","markdownUrl":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp.md","server":{"slug":"rohith1125-sentinel-execution-mcp","name":"io.github.rohith1125/sentinel-execution-mcp","registryName":"io.github.rohith1125/sentinel-execution-mcp","description":"AI-controlled algorithmic trading engine exposing 40 MCP tools across 9 namespaces.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"sentinel-execution-mcp","type":"npm","identifier":"sentinel-execution-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp","version":"0.1.2","transport":"stdio","scoredAt":"2026-11-05T02:27:57.840Z"},"score":{"total":33,"tier":"low","status":"scored","weekDelta":0,"history":[{"date":"2026-11-05","total":33},{"date":"2026-11-04","total":33},{"date":"2026-11-03","total":33},{"date":"2026-11-02","total":33},{"date":"2026-11-01","total":33},{"date":"2026-10-31","total":33},{"date":"2026-10-30","total":33},{"date":"2026-10-29","total":33},{"date":"2026-10-28","total":33},{"date":"2026-10-27","total":33},{"date":"2026-10-26","total":33},{"date":"2026-10-25","total":33},{"date":"2026-10-24","total":33},{"date":"2026-10-23","total":38},{"date":"2026-10-22","total":38},{"date":"2026-10-21","total":38},{"date":"2026-10-20","total":38},{"date":"2026-10-19","total":38},{"date":"2026-10-18","total":38},{"date":"2026-10-17","total":38},{"date":"2026-10-16","total":38},{"date":"2026-10-15","total":38},{"date":"2026-10-14","total":38},{"date":"2026-10-13","total":38},{"date":"2026-10-12","total":38},{"date":"2026-10-11","total":38},{"date":"2026-10-05","total":38},{"date":"2026-10-04","total":38},{"date":"2026-10-03","total":38},{"date":"2026-10-02","total":38}]},"categories":[{"name":"Supply Chain Security","score":81,"verdict":"fail","reasons":["No malware found by supply-chain analysis.","CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available.","No install/post-install scripts declared.","51 of 141 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.direct","args":{"package":"zod","version":"3.25.76","severity":"high"}},{"code":"installscript.none","args":{}},{"code":"dephealth.assessed","args":{"deps":"141","unhealthy":"51"}}]},{"name":"Provenance & Transparency","score":45,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 229 days ago).","Disclosure check failed: no security disclosure policy was found in the source repository."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"229"}},{"code":"disclosure.absent","args":{}}]},{"name":"Schema Quality & AI Usability","score":0,"verdict":"unverified","reasons":["Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess."],"codes":[{"code":"schema.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Stability & Change Management","score":0,"verdict":"unverified","reasons":["Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare."],"codes":[{"code":"stability.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Coverage","score":0,"verdict":"unverified","reasons":["Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess."],"codes":[{"code":"toolquality.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Tool Safety","score":0,"verdict":"unverified","reasons":["Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan."],"codes":[{"code":"toolsafety.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]},{"name":"Capabilities","score":0,"verdict":"unverified","reasons":["Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"codes":[{"code":"cap.sandbox_failed","args":{"reason":"startup_failure","status":"unreachable"}}]}],"inconclusive":["Schema quality not yet verified: this package installed, but its server did not start, so we have no schema to assess.","Stability not yet verified: this package installed, but its server did not start, so we have no schema to compare.","Tool coverage not yet verified: this package installed, but its server did not start, so we have no tool definitions to assess.","Tool safety not yet verified: this package installed, but its server did not start, so we have no tool text to scan.","Protocol version not yet verified: this package installed, but its server did not start, so we never saw its MCP handshake."],"malware":[],"components":[{"slug":"sentinel-execution-mcp","type":"npm","identifier":"sentinel-execution-mcp","withdrawn":false,"score":33,"current":true,"url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp","markdownUrl":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp.md"}],"facts":[{"label":"Registry","value":"npm"},{"label":"Package","value":"sentinel-execution-mcp"},{"label":"Version","value":"0.1.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T02:27:57.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":null,"reasonLabel":null,"discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[{"id":"GHSA-mrhx-c7xc-m3w5","cve":"CVE-2023-54404","severity":"high","fixAvailable":true}],"vulnerabilitiesTotal":1,"dependencies":{"nodes":141,"partial":false,"deprecated":null,"stale":51,"noRepo":null}},"mismatches":[],"changelog":{"trackingSince":"2026-07-27","recent":[{"id":"chg_01a16bbb-dad7-7845-9d65-e8004cbb3b6c","kind":"advisory.identified","summary":"CVE-2023-54404 affects this package (high)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a16bbb-dad7-7845-9d65-e8004cbb3b6c"},{"id":"chg_01a16bbb-dad8-742c-bfc8-4958a8b04e1d","kind":"check.verdict","summary":"Known CVEs (pass → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a16bbb-dad8-742c-bfc8-4958a8b04e1d"},{"id":"chg_01a16bbb-dad8-7935-88e2-da19d1152349","kind":"score.total_changed","summary":"Trust score (38 → 33)","materiality":"functional","direction":"regression","scoreDelta":-5,"occurredOn":"2026-10-24","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a16bbb-dad8-7935-88e2-da19d1152349"},{"id":"chg_01a13311-9779-75e3-a813-4997a20d4b0b","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-13","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a13311-9779-75e3-a813-4997a20d4b0b"},{"id":"chg_01a12d5b-cd32-74fd-89e9-c798ea2eb127","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-11","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a12d5b-cd32-74fd-89e9-c798ea2eb127"},{"id":"chg_01a0e5c3-5543-7439-91ae-eda53693851c","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-09-28","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a0e5c3-5543-7439-91ae-eda53693851c"},{"id":"chg_01a0d64f-e3b2-770d-b2d6-fd8c085033d4","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-09-25","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a0d64f-e3b2-770d-b2d6-fd8c085033d4"},{"id":"chg_01a03bd8-102c-7bba-8ac6-de43287fd4bf","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-26","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_01a03bd8-102c-7bba-8ac6-de43287fd4bf"},{"id":"chg_019ff8e2-573d-71bc-9428-d1aba355550d","kind":"check.reverified","summary":"Security disclosure (unverified → fail)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-13","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019ff8e2-573d-71bc-9428-d1aba355550d"},{"id":"chg_019ff3bd-e205-7d3a-9af3-fff1a2934cd8","kind":"check.unverifiable","summary":"Security disclosure (fail → unverified)","materiality":"functional","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-12","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019ff3bd-e205-7d3a-9af3-fff1a2934cd8"},{"id":"chg_019fee95-b9e0-75d7-9b84-ce931b4784e5","kind":"score.rubric_changed","summary":"We updated how we score, so this day's move reflects our rubric, not a change to the server","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-11","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fee95-b9e0-75d7-9b84-ce931b4784e5"},{"id":"chg_019fd9fb-f315-705d-bc1c-9362f1fcdb74","kind":"check.verdict","summary":"Known CVEs (partial → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-07","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fd9fb-f315-705d-bc1c-9362f1fcdb74"},{"id":"chg_019fd9fb-f315-7e35-85dd-f7a075d4c26a","kind":"check.verdict","summary":"Dependency health (partial → 0.84)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-08-07","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fd9fb-f315-7e35-85dd-f7a075d4c26a"},{"id":"chg_019fd9fb-f316-73a5-9e95-67b197ca58de","kind":"score.total_changed","summary":"Trust score (35 → 38)","materiality":"functional","direction":"improvement","scoreDelta":3,"occurredOn":"2026-08-07","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fd9fb-f316-73a5-9e95-67b197ca58de"},{"id":"chg_019fcfbf-ea1e-707f-88c0-41aa4365835e","kind":"advisory.resolved","summary":"CVE-2026-69207 no longer affects this package","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-05","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fcfbf-ea1e-707f-88c0-41aa4365835e"},{"id":"chg_019fcfbf-ea1e-7b2b-911f-d45c4fcbe98c","kind":"check.verdict","summary":"Known CVEs (fail → partial)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-08-05","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fcfbf-ea1e-7b2b-911f-d45c4fcbe98c"},{"id":"chg_019fcfbf-ea1f-712e-817f-e3e545a4dfa6","kind":"score.total_changed","summary":"Trust score (34 → 35)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-08-05","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fcfbf-ea1f-712e-817f-e3e545a4dfa6"},{"id":"chg_019fca88-c739-7f09-b15a-d2a5596b8c39","kind":"advisory.identified","summary":"CVE-2026-69207 affects this package (medium)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-04","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fca88-c739-7f09-b15a-d2a5596b8c39"},{"id":"chg_019fca88-c73a-7d93-aa11-29f17aef2791","kind":"check.verdict","summary":"Known CVEs (partial → fail)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-08-04","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fca88-c73a-7d93-aa11-29f17aef2791"},{"id":"chg_019fca88-c73b-7397-a29b-ef24d6f1ca4b","kind":"score.total_changed","summary":"Trust score (35 → 34)","materiality":"functional","direction":"regression","scoreDelta":-1,"occurredOn":"2026-08-04","url":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp#chg-chg_019fca88-c73b-7397-a29b-ef24d6f1ca4b"}],"truncated":true,"feedUrl":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp","markdown":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp.md","changelogJson":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/rohith1125-sentinel-execution-mcp/sentinel-execution-mcp.xml","external":[{"label":"npm package","href":"https://www.npmjs.com/package/sentinel-execution-mcp"},{"label":"Socket report","href":"https://socket.dev/npm/package/sentinel-execution-mcp"},{"label":"Repository","href":"https://github.com/rohith1125/sentinel-execution-mcp"}]}}