MCP, MCP server
openhedge
Open source experimental tool for discovering relevant hedges using event contracts and prediction markets.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST SECRETS_PATH_DOTENV PERMISSION_SHELL_DECLARED INSTALL_DOCUMENTED_INSTALLER OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
.agents/skills/how-to-add-cloudflare-tunnel/SKILL.md, line 110
curl -sS "https://mcp.<domain>/health" - NETWORK_UNNAMED_HOST Low
Calls a fixed host that the description does not name.
.agents/skills/how-to-add-cloudflare-tunnel/SKILL.md, line 110
curl -sS "https://mcp.<domain>/health" - SECRETS_PATH_DOTENV Low
Mentions a .env file.
.agents/skills/how-to-get-started/SKILL.md, line 26
- [ ] `.env` created from `.env.example` with OPENROUTER_API_KEY - PERMISSION_SHELL_DECLARED Note
Runs shell commands, and the manifest or description says so.
.agents/skills/how-to-deploy-landing/SKILL.md, line 70
return subprocess.check_output(args, text=True) - INSTALL_DOCUMENTED_INSTALLER Note
Documentation shows an installer that pipes a download into a shell.
README.md, line 79
curl -LsSf https://astral.sh/uv/install.sh | sh - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
openhedge-core/uv.lock, line 1
version = 1
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
.agents/skills/how-to-deploy-landing/SKILL.md, line 70
return subprocess.check_output(args, text=True)
.agents/skills/how-to-deploy-landing/scripts/assert_not_oss_stack.py, line 13
status = json.loads(subprocess.check_output(["railway", "status", "--json"], text=True))
.agents/skills/how-to-deploy-to-railway/SKILL.md, line 119
return subprocess.check_output(args, text=True)
Show more
.agents/skills/how-to-deploy-to-railway/scripts/create_empty_service.py, line 12
return subprocess.check_output(args, text=True)
.agents/skills/how-to-deploy-to-railway/scripts/set_railway_config_file.py, line 12
return subprocess.check_output(args, text=True)
.agents/skills/how-to-publish-railway-template/scripts/verify_template_vars.py, line 34
return subprocess.check_output(args, text=True)
Install and update
Note
README documents an installer that pipes a download into a shell. The docs document an installer that pipes a download into a shell.
INSTALL_DOCUMENTED_INSTALLER
README.md, line 79
curl -LsSf https://astral.sh/uv/install.sh | sh
.agents/skills/how-to-get-started/SKILL.md, line 41
curl -LsSf https://astral.sh/uv/install.sh | sh
Network
Concern
can reach mcp.. The description does not name that host. can reach www.openhedge.app. The description does not name that host. can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
.agents/skills/how-to-add-cloudflare-tunnel/SKILL.md, line 110
curl -sS "https://mcp.<domain>/health"
.agents/skills/how-to-add-cloudflare-tunnel/SKILL.md, line 111
curl -sS "https://mcp.<domain>/ready"
.agents/skills/how-to-deploy-landing/SKILL.md, line 154
curl -sS -o /dev/null -w '%{http_code}\n' https://openhedge.app
Show more
.agents/skills/how-to-deploy-landing/SKILL.md, line 155
curl -sS -D - -o /dev/null https://www.openhedge.app | head -15
.agents/skills/how-to-deploy-landing/SKILL.md, line 156
curl -sS -o /dev/null -w '%{http_code} %{url_effective}\n' -L https://www.openhedge.app
.agents/skills/how-to-deploy-landing/SKILL.md, line 157
curl -sS "https://mcp.openhedge.app/health"
.agents/skills/how-to-deploy-to-railway/SKILL.md, line 204
curl -sS "https://<caddy-domain>/health" # Caddy local; Railway healthcheck
.agents/skills/how-to-deploy-to-railway/SKILL.md, line 205
curl -sS "https://<caddy-domain>/ready" # MCP via Caddy
.agents/skills/how-to-get-started/SKILL.md, line 88
curl -sS http://localhost:8000/health
.agents/skills/how-to-get-started/SKILL.md, line 89
curl -sS http://localhost:8000/ready
.agents/skills/how-to-get-started/SKILL.md, line 90
curl -sS http://localhost:8001/ready
.agents/skills/try-hedging-examples/SKILL.md, line 16
- [ ] MCP serving (`curl -sS http://localhost:8001/ready`)
.agents/skills/try-hedging-examples/SKILL.md, line 29
curl -sS http://localhost:8001/ready
.agents/skills/try-hedging-examples/scripts/count_markets.sh, line 12
http_code="$(curl -sS -o "$body" -w "%{http_code}" "$URL")" || {
docker-compose.yml, line 79
"import urllib.request; urllib.request.urlopen('http://127.0.0.1:8000/ready')",
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
.agents/skills/how-to-get-started/SKILL.md, line 26
- [ ] `.env` created from `.env.example` with OPENROUTER_API_KEY
.agents/skills/how-to-get-started/SKILL.md, line 50
cp .env.example .env
.agents/skills/how-to-get-started/SKILL.md, line 106
set -a && source .env && set +a
Show more
.agents/skills/how-to-get-started/SKILL.md, line 11
Get the user running quickly. Prefer Docker Compose for local use; if they want a hosted stack, use the README **Deploy on Railway** button or follow [how-to-deploy-to-railway](../
.agents/skills/how-to-get-started/SKILL.md, line 53
Ask the user to fill `OPENROUTER_API_KEY` in `.env`. Do not invent or commit the key.
.agents/skills/how-to-get-started/SKILL.md, line 57
After `.env` is filled:
.agents/skills/how-to-get-started/SKILL.md, line 103
Only when the user is developing a single service. Qdrant must already be on `http://localhost:6333`. Settings do **not** load `.env`; Compose does. Export env first:
.agents/skills/how-to-get-started/SKILL.md, line 123
- Do not commit `.env` (gitignored). `.env.example` is the template.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
openhedge-core/uv.lock, line 1
version = 1
web/package-lock.json, line 1
{
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 66a368741846. requests shell access. The manifest names this permission. README documents an installer that pipes a download into a shell. The docs document an installer that pipes a download into a shell. can reach mcp.. The description does not name that host. can reach www.openhedge.app. The description does not name that host. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 66a368741846ea60886628884a305c01839fee22
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.