A security registry and assessment suite for auditing MCP servers and skill files. It enables registry lookups, batch risk scoring, and SAST scanning via Semgrep to verify provenance and trust.