From 953fb024cf26709410b013163947947eb0981f76 Mon Sep 17 00:00:00 2001 From: Nick Date: Mon, 14 Sep 2026 01:55:29 -0400 Subject: [PATCH 1/3] Add Small Print (Security) --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 5c44d8313..75c63e0c9 100644 --- a/README.md +++ b/README.md @@ -3778,6 +3778,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [Jiangw2718i/frisk](https://github.com/Jiangw2718i/frisk) [![Jiangw2718i/frisk MCP server](https://glama.ai/mcp/servers/Jiangw2718i/frisk/badges/score.svg)](https://glama.ai/mcp/servers/Jiangw2718i/frisk) 📇 🏠 ☁️ - Screen the counterparty of an x402 payment before an agent pays it. One tool, `screen_payment`, runs deterministic checks — address sanity, dynamic-`payTo` swap detection, transport safety and your own spend policy — and returns `allow`/`review`/`block` with the reasons for the verdict. Advisory: it never holds funds, and your code decides. Runs entirely on your machine by default with no key, no account and no network call (MIT, 5 packages installed); set `FRISK_API_KEY` to answer the same tool from the hosted reputation graph instead. `npx frisk-mcp` - [epistemedeus/skillguard](https://github.com/epistemedeus/skillguard) [![epistemedeus/skillguard MCP server](https://glama.ai/mcp/servers/epistemedeus/skillguard/badges/score.svg)](https://glama.ai/mcp/servers/epistemedeus/skillguard) 📇 🏠 - Static security scanner for Claude Code skills, plugins, and MCP servers — vet a dependency for malware (secret/env exfiltration, install-time hooks, prompt injection, committed binaries) **before** you install it. Static-only: it clones and reads files, never executes the scanned code. `npx -y github:epistemedeus/skillguard mcp` +- [gostanos/smallprint-action](https://github.com/gostanos/smallprint-action/tree/main/mcp) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Three read-only tools over the public record; `npx -y smallprint-mcp`. ### 🌐 Social Media From 2f5ec85484f045717269fdc9a19008f68f2b4a18 Mon Sep 17 00:00:00 2001 From: Nick Date: Thu, 17 Sep 2026 09:20:59 -0400 Subject: [PATCH 2/3] Add Glama score badge to the Small Print entry --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 75c63e0c9..adb19d6f3 100644 --- a/README.md +++ b/README.md @@ -3778,7 +3778,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [Jiangw2718i/frisk](https://github.com/Jiangw2718i/frisk) [![Jiangw2718i/frisk MCP server](https://glama.ai/mcp/servers/Jiangw2718i/frisk/badges/score.svg)](https://glama.ai/mcp/servers/Jiangw2718i/frisk) 📇 🏠 ☁️ - Screen the counterparty of an x402 payment before an agent pays it. One tool, `screen_payment`, runs deterministic checks — address sanity, dynamic-`payTo` swap detection, transport safety and your own spend policy — and returns `allow`/`review`/`block` with the reasons for the verdict. Advisory: it never holds funds, and your code decides. Runs entirely on your machine by default with no key, no account and no network call (MIT, 5 packages installed); set `FRISK_API_KEY` to answer the same tool from the hosted reputation graph instead. `npx frisk-mcp` - [epistemedeus/skillguard](https://github.com/epistemedeus/skillguard) [![epistemedeus/skillguard MCP server](https://glama.ai/mcp/servers/epistemedeus/skillguard/badges/score.svg)](https://glama.ai/mcp/servers/epistemedeus/skillguard) 📇 🏠 - Static security scanner for Claude Code skills, plugins, and MCP servers — vet a dependency for malware (secret/env exfiltration, install-time hooks, prompt injection, committed binaries) **before** you install it. Static-only: it clones and reads files, never executes the scanned code. `npx -y github:epistemedeus/skillguard mcp` -- [gostanos/smallprint-action](https://github.com/gostanos/smallprint-action/tree/main/mcp) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Three read-only tools over the public record; `npx -y smallprint-mcp`. +- [gostanos/smallprint-action](https://github.com/gostanos/smallprint-action/tree/main/mcp) [![gostanos/smallprint-action MCP server](https://glama.ai/mcp/servers/gostanos/smallprint-action/badges/score.svg)](https://glama.ai/mcp/servers/gostanos/smallprint-action) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Three read-only tools over the public record; `npx -y smallprint-mcp`. ### 🌐 Social Media From c42f943ba1e59ace612869fb1417979843a9d4e1 Mon Sep 17 00:00:00 2001 From: Nick Date: Thu, 17 Sep 2026 13:30:11 -0400 Subject: [PATCH 3/3] Small Print: four tools, the approval check named --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 5b4c4b905..21a68f0c1 100644 --- a/README.md +++ b/README.md @@ -3949,7 +3949,7 @@ Tools for conducting research, surveys, interviews, and data collection. - [Drumworks/ssid-mcp](https://github.com/Drumworks/ssid-mcp) [![Drumworks/ssid-mcp MCP server](https://glama.ai/mcp/servers/Drumworks/ssid-mcp/badges/score.svg)](https://glama.ai/mcp/servers/Drumworks/ssid-mcp) 📇 ☁️ - MAC-address (OUI) vendor lookup and router default-login directory for AI agents. Identify a device manufacturer from its MAC address, detect randomized/private (locally-administered) addresses instead of reporting "unknown", or fetch a router's default login IP and admin credentials — every router field cited to the manufacturer's own documentation. Free tier, no signup. `npx -y ssid-mcp` -- [gostanos/smallprint-action](https://github.com/gostanos/smallprint-action/tree/main/mcp) [![gostanos/smallprint-action MCP server](https://glama.ai/mcp/servers/gostanos/smallprint-action/badges/score.svg)](https://glama.ai/mcp/servers/gostanos/smallprint-action) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Three read-only tools over the public record; `npx -y smallprint-mcp`. +- [gostanos/smallprint-action](https://github.com/gostanos/smallprint-action/tree/main/mcp) [![gostanos/smallprint-action MCP server](https://glama.ai/mcp/servers/gostanos/smallprint-action/badges/score.svg)](https://glama.ai/mcp/servers/gostanos/smallprint-action) 📇 ☁️ - Read the Small Print record: the tool descriptions, schemas and instructions of MCP servers, agent skills and plugins, hashed every version and diffed between releases, each change graded by a printed rule, with public advisories joined by version. Four read-only tools over the public record, including a yes-or-no check that a server's small print has not moved since the version you approved; `npx -y smallprint-mcp`. ### 🌐 Social Media