{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-06T12:35:22.111Z","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa","markdownUrl":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa.md","server":{"slug":"roy32172310-qa","name":"ego-webqa","registryName":"io.github.ROY32172310/qa","description":"Deterministic browser delivery checks for AI-generated web pages.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ego-webqa","type":"pypi","identifier":"ego-webqa","withdrawn":false,"url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa","version":"0.8.2","transport":"stdio","scoredAt":"2026-11-06T08:10:04.787Z"},"score":{"total":79,"tier":"medium","status":"scored","weekDelta":19,"history":[{"date":"2026-11-06","total":79},{"date":"2026-11-05","total":78},{"date":"2026-11-04","total":78},{"date":"2026-11-03","total":77},{"date":"2026-11-02","total":77},{"date":"2026-11-01","total":76},{"date":"2026-10-31","total":76},{"date":"2026-10-30","total":60},{"date":"2026-10-29","total":75}]},"categories":[{"name":"Supply Chain Security","score":100,"verdict":"partial","reasons":["No malware found by supply-chain analysis.","No known CVEs affecting this package version or its production dependencies.","Runs setuptools.build_meta at install time, a recognised build step with no custom scripting around it.","1 of 31 dependencies flagged as unhealthy."],"codes":[{"code":"supplychain.malware_clean","args":{}},{"code":"cve.none","args":{}},{"code":"installscript.allowlisted","args":{"tool":"setuptools.build_meta","hooks":"build_backend"}},{"code":"dephealth.assessed","args":{"deps":"31","unhealthy":"1"}}]},{"name":"Provenance & Transparency","score":100,"verdict":"pass","reasons":["Source repository is publicly reachable at the declared URL.","Cryptographically verified build provenance (signed, bound to ROY32172310/qa).","Clear OSI-approved license (MIT).","Actively maintained (last published 6 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.verified","args":{"repo":"ROY32172310/qa"}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"6"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":53,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Context-footprint check failed: tool/resource definitions use about 315 tokens (~315/item across 1 items; 1 tools + 0 resources), over budget; trim descriptions and params.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_heavy","args":{"avg":"315","items":"1","tools":"1","tokens":"315","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":27,"verdict":"partial","reasons":["Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"8"}}]},{"name":"Tool Coverage","score":67,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 1 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 2 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"1"}},{"code":"toolsafety.manipulation_clean","args":{"units":"2","judged":"2"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":[],"malware":[],"components":[{"slug":"ego-webqa","type":"pypi","identifier":"ego-webqa","withdrawn":false,"score":79,"current":true,"url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa","markdownUrl":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa.md"}],"facts":[{"label":"Registry","value":"pypi"},{"label":"Package","value":"ego-webqa"},{"label":"Version","value":"0.8.2"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"audit_web_page","title":"Audit generated web page","description":"Audit a generated page in a real browser and return deterministic evidence.\n\nProvide exactly one of `url` or `directory`. The result is blocked when the\npage has a delivery error; warnings remain visible but do not block unless\n`fail_on_warn` is enabled in the JSON config. This checks delivery usability,\nnot security, WCAG conformance, visual regression, or real-device Safari\nparity. Use browser_engine=\"webkit\" for a WebKit approximation only.","inputs":[{"name":"browser_engine","type":"string","required":false,"description":null},{"name":"config","type":"string","required":false,"description":null},{"name":"directory","type":"string","required":false,"description":null},{"name":"file","type":"string","required":false,"description":null},{"name":"out_dir","type":"string","required":false,"description":null},{"name":"profile","type":"string","required":false,"description":null},{"name":"ready_selector","type":"string","required":false,"description":null},{"name":"smoke","type":"boolean","required":false,"description":null},{"name":"smoke_flow_name","type":"string","required":false,"description":null},{"name":"smoke_require_assertion","type":"boolean","required":false,"description":null},{"name":"smoke_scope","type":"string","required":false,"description":null},{"name":"smoke_selector","type":"string","required":false,"description":null},{"name":"smoke_settle_ms","type":null,"required":false,"description":null},{"name":"smoke_success_selector","type":"string","required":false,"description":null},{"name":"smoke_success_url_pattern","type":"string","required":false,"description":null},{"name":"timeout_ms","type":null,"required":false,"description":null},{"name":"url","type":"string","required":false,"description":null},{"name":"viewport_preset","type":"string","required":false,"description":null},{"name":"viewports","type":null,"required":false,"description":null},{"name":"wait_for_network_idle","type":"boolean","required":false,"description":null}],"outputs":[],"hasOutputSchema":false,"hasExamples":false,"tokenEstimate":263}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-06T08:10:04.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"verified","label":"Verified","reason":"verified","reasonLabel":"Verified","discovery":"attestation_endpoint","discoveryLabel":"Registry attestation endpoint","sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[{"hook":"build_backend","tier":"allowlisted"}],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":{"nodes":31,"partial":false,"deprecated":null,"stale":null,"noRepo":1}},"mismatches":[],"changelog":{"trackingSince":"2026-10-29","recent":[{"id":"chg_01a1afe8-62d9-788c-8907-0b03dea7eb94","kind":"score.total_changed","summary":"Trust score (78 → 79)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-06","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a1afe8-62d9-788c-8907-0b03dea7eb94"},{"id":"chg_01a1a4f2-6740-7173-9358-d6659b5c22a4","kind":"score.total_changed","summary":"Trust score (77 → 78)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-04","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a1a4f2-6740-7173-9358-d6659b5c22a4"},{"id":"chg_01a19aa4-db40-7620-b51d-2ceab8e2e0b7","kind":"score.total_changed","summary":"Trust score (76 → 77)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a19aa4-db40-7620-b51d-2ceab8e2e0b7"},{"id":"chg_01a1908d-d963-7b06-a1cc-209edb1a2594","kind":"check.reverified","summary":"Malware scan (unverified → pass)","materiality":"security","direction":"improvement","scoreDelta":null,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a1908d-d963-7b06-a1cc-209edb1a2594"},{"id":"chg_01a1908d-d964-791b-9972-00869520d557","kind":"score.total_changed","summary":"Trust score (60 → 76)","materiality":"functional","direction":"improvement","scoreDelta":16,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a1908d-d964-791b-9972-00869520d557"},{"id":"chg_01a18c71-bb53-720c-99df-c0a1b1e7c663","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.8.2)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18c71-bb53-720c-99df-c0a1b1e7c663"},{"id":"chg_01a18c71-bb53-7c3a-a903-e06e7487bc53","kind":"score.total_changed","summary":"Trust score (75 → 60)","materiality":"functional","direction":"regression","scoreDelta":-15,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18c71-bb53-7c3a-a903-e06e7487bc53"},{"id":"chg_01a18c3d-4c76-7a13-b559-b325e0c34d03","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.8.1)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18c3d-4c76-7a13-b559-b325e0c34d03"},{"id":"chg_01a18b9b-e746-716f-8802-8f441e94972d","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.8.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18b9b-e746-716f-8802-8f441e94972d"},{"id":"chg_01a18b9b-e747-7bcf-b605-6dd9fd6cbab1","kind":"score.total_changed","summary":"Trust score (61 → 75)","materiality":"functional","direction":"improvement","scoreDelta":14,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18b9b-e747-7bcf-b605-6dd9fd6cbab1"},{"id":"chg_01a18ab2-f9f7-7e4c-9798-0fb9881dba6d","kind":"check.unverifiable","summary":"Malware scan (pass → unverified)","materiality":"security","direction":"regression","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18ab2-f9f7-7e4c-9798-0fb9881dba6d"},{"id":"chg_01a18ab2-f9f8-7d3d-bae7-cf196a9a92a3","kind":"package.version_changed","summary":"Package version (0.6.0 → 0.7.0)","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18ab2-f9f8-7d3d-bae7-cf196a9a92a3"},{"id":"chg_01a18ab2-f9f9-784b-8cba-ebf8a786e058","kind":"score.total_changed","summary":"Trust score (75 → 61)","materiality":"functional","direction":"regression","scoreDelta":-14,"occurredOn":"2026-10-30","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a18ab2-f9f9-784b-8cba-ebf8a786e058"},{"id":"chg_01a187c7-15dd-7ba3-86c6-0b3f0f6fd437","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a187c7-15dd-7ba3-86c6-0b3f0f6fd437"},{"id":"chg_01a187ab-60ab-7479-95a1-9a9fd32de655","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a187ab-60ab-7479-95a1-9a9fd32de655"},{"id":"chg_01a1870b-b95c-733d-824f-ffabb956f4b3","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a1870b-b95c-733d-824f-ffabb956f4b3"},{"id":"chg_01a186ec-188b-755e-927d-f0803354f698","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa#chg-chg_01a186ec-188b-755e-927d-f0803354f698"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa/changelog.json"},"links":{"html":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa","markdown":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa.md","changelogJson":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa/changelog.json","changelogRss":"https://verifymcp.io/servers/roy32172310-qa/ego-webqa.xml","external":[{"label":"PyPI project","href":"https://pypi.org/project/ego-webqa/"},{"label":"Socket report","href":"https://socket.dev/pypi/package/ego-webqa"},{"label":"Repository","href":"https://github.com/ROY32172310/qa"},{"label":"Website","href":"https://roy32172310.github.io/qa/"}]}}