/ 100

13 days ago

glama

Judges Panel

Item: Judges Panel
Rating: 0
Author: M8ven

Enables evaluation of AI-generated code across 45 specialized dimensions using deterministic pattern matching and optional LLM-powered deep review, acting as an independent quality gate.

→ KevinRabun/judges · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Hardcoded credentials detected

5 live-looking API keys in source: 3 OpenAI API key, 2 OpenAI project key

🔐

You'll be asked for 4 credentials: ADMIN_TOKEN, ANTHROPIC_API_KEY, GH_TOKEN, GITHUB_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 medium

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

medium@anthropic-ai/sdk@0.81.0GHSA-p7fg-763f-g4gf

Claude SDK for TypeScript has Insecure Default File Permissions in Local Filesystem Memory Tool

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretADMIN_TOKEN

🔐 secretANTHROPIC_API_KEY

configAUTOFIX_MIN_PRIORITY_SCORE— minimum candidate priority score required after dedupe (default: 0, disabled).

configAUTOFIX_PRIORITY_RULE_PREFIXES

configDRY_RUN

configENABLE_FALLBACK

configFALLBACK_HIGH_CRITICAL_ONLY

configFALLBACK_MIN_CONFIDENCE

🔐 secretGH_TOKEN

🔐 secretGITHUB_TOKEN

configINCLUDE_TOTAL_FINDINGS_SCAN

configJUDGES_GRAMMAR_BASE_URL

configJUDGES_SHOW_EXPERIMENTAL— 🧪 Many commands in printHelp are experimental/roadmap. By default, we show GA commands only. Set =1 to reveal stubs; these may not be wired yet.

configJUDGES_TEST_DRY_RUN— 1 to avoid live network calls during tests

configMAX_PRS

configMAX_REPOS_PER_DAY

configMIN_CONFIDENCE

configPER_REPO_TIMEOUT_MINUTES

configPOPULAR_REPOS

configSUMMARY_PATH— Each run writes daily-autofix-summary.json (or ) with per-repository telemetry, including:

configTARGET_REPO_OWNER

configTARGET_REPO_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/kevinrabun-judges-1ynbp0)](https://m8ven.ai/mcp/kevinrabun-judges-1ynbp0)

commit: 8432a667142535f2e7fa4126d7b6e18d7c9a7978

code hash: d3290bdda6122e72fa14ece0cf346bd539a154dc4029258d06495723607b2226

verified: 7/18/2026, 8:08:03 AM

view raw JSON →