Add MseeP.ai badge

[mseep-ai]

Hi there,

This pull request shares a security update on coderocket-mcp.

We also have an entry for coderocket-mcp in our directory, MseeP.ai, where we provide regular security and trust updates on your app.

We invite you to add our badge for your MCP server to your README to help your users learn from a third party that provides ongoing validation of coderocket-mcp.

You can easily take control over your listing for free: visit it at https://mseep.ai/app/im47cn-coderocket-mcp.

Thanks,

The MseeP Team
MCP servers you can trust

---

Here are our latest evaluation results of coderocket-mcp

Security Scan Results

Security Score: 73/100

Risk Level: moderate

Scan Date: 2026-07-06

Score starts at 100, deducts points for security issues, and adds points for security best practices

Detected Vulnerabilities

Medium Severity

• js-yaml

  • [{'source': 1112715, 'name': 'js-yaml', 'dependency': 'js-yaml', 'title': 'js-yaml has prototype pollution in merge (<<)', 'url': 'https://github.com/advisories/GHSA-mh29-5h37-fv8m', 'severity': 'moderate', 'cwe': ['CWE-1321'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}, 'range': '>=4.0.0 <4.1.1'}, {'source': 1121860, 'name': 'js-yaml', 'dependency': 'js-yaml', 'title': 'JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases', 'url': 'https://github.com/advisories/GHSA-h67p-54hq-rp68', 'severity': 'moderate', 'cwe': ['CWE-407'], 'cvss': {'score': 5.3, 'vectorString': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}, 'range': '>=4.0.0 <=4.1.1'}]
  • Fixed in version: unknown

• @modelcontextprotocol/sdk

  • [{'source': 1111906, 'name': '@modelcontextprotocol/sdk', 'dependency': '@modelcontextprotocol/sdk', 'title': "Anthropic's MCP TypeScript SDK has a ReDoS vulnerability", 'url': 'https://github.com/advisories/GHSA-8r9q-7v3j-jr4g', 'severity': 'high', 'cwe': ['CWE-1333'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '<1.25.2'}, {'source': 1113213, 'name': '@modelcontextprotocol/sdk', 'dependency': '@modelcontextprotocol/sdk', 'title': 'Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default', 'url': 'https://github.com/advisories/GHSA-w48q-cv73-mx4w', 'severity': 'high', 'cwe': ['CWE-350', 'CWE-1188'], 'cvss': {'score': 0, 'vectorString': None}, 'range': '<1.24.0'}]
  • Fixed in version: unknown

• @typescript-eslint/eslint-plugin

  • ['@typescript-eslint/type-utils', '@typescript-eslint/utils']
  • Fixed in version: unknown

• ... and 12 more medium severity vulnerabilities

This security assessment was conducted by MseeP.ai, an independent security validation service for MCP servers. Visit our website to learn more about our security reviews.

Summary by Sourcery

Documentation:

• 在 README 顶部添加 MseeP.ai 安全部评估徽章，以突出 MCP 服务器的外部安全评估。

Original summary in English

Summary by Sourcery

Documentation:

• Add MseeP.ai security assessment badge at the top of the README to highlight external security evaluation of the MCP server.

Summary by CodeRabbit

• 文档
  • 在项目说明页顶部新增了一个安全评估徽标链接，页面其余内容保持不变。

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3153bc1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[sourcery-ai]

审阅者指南（在较小的 PR 中折叠显示）

审阅者指南

此 PR 在 README 顶部添加了一个指向 MseeP.ai 安全评估的徽章链接，用于展示 CodeRocket MCP 服务器的第三方安全信息。

文件级更改

更改	详情	文件
在 README 头部添加 MseeP.ai 安全评估徽章。	插入一个 Markdown 图片徽章，从 mseep.net 加载 MseeP.ai 安全评估图标。 将徽章图片包裹在一个链接中，指向 coderocket-mcp 的 MseeP.ai 应用页面。 将徽章放置在 README 最顶部，位于主 CodeRocket MCP 标题和居中内容部分的上方。	README.md

---

提示与命令

与 Sourcery 交互

• 触发新的审阅： 在 pull request 中评论 @sourcery-ai review。
• 继续讨论： 直接回复 Sourcery 的审阅评论。
• 从审阅评论生成 GitHub issue： 通过回复审阅评论请求 Sourcery 从该评论创建一个 issue。你也可以在审阅评论中回复 @sourcery-ai issue 来从该评论创建 issue。
• 生成 pull request 标题： 在 pull request 标题的任意位置写上 @sourcery-ai，即可随时生成标题。你也可以在 pull request 中评论 @sourcery-ai title 来在任意时间（重新）生成标题。
• 生成 pull request 摘要： 在 pull request 正文任意位置写上 @sourcery-ai summary，即可在你指定的位置随时生成 PR 摘要。你也可以在 pull request 中评论 @sourcery-ai summary 来在任意时间（重新）生成摘要。
• 生成审阅者指南： 在 pull request 中评论 @sourcery-ai guide，即可在任意时间（重新）生成审阅者指南。
• 解决所有 Sourcery 评论： 在 pull request 中评论 @sourcery-ai resolve，即可将所有 Sourcery 评论标记为已解决。如果你已经处理完所有评论且不希望再看到它们，这会很有用。
• 忽略所有 Sourcery 审阅： 在 pull request 中评论 @sourcery-ai dismiss，即可忽略所有现有的 Sourcery 审阅。特别适用于你希望从一次全新的审阅开始——别忘了评论 @sourcery-ai review 来触发新的审阅！

自定义你的体验

在你的 dashboard 中可以：

• 启用或禁用审阅功能，例如 Sourcery 生成的 pull request 摘要、审阅者指南等。
• 更改审阅语言。
• 添加、删除或编辑自定义审阅说明。
• 调整其他审阅设置。

获取帮助

• 如有问题或反馈，请联系我们的支持团队。
• 访问我们的文档以获取详细指南和信息。
• 通过关注我们的 X/Twitter、LinkedIn 或 GitHub 与 Sourcery 团队保持联系。

Original review guide in English

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR adds an external MseeP.ai security assessment badge link to the top of the README to surface third-party security information for the CodeRocket MCP server.

File-Level Changes

Change	Details	Files
Add MseeP.ai security assessment badge to the README header.	Insert a Markdown image badge that loads the MseeP.ai security assessment graphic from mseep.net. Wrap the badge image in a link pointing to the MseeP.ai app page for coderocket-mcp. Place the badge at the very top of the README, above the main CodeRocket MCP heading and centered content section.	README.md

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ea062e1a-0ac9-4281-95a6-05aa8e6c6132

📥 Commits

Reviewing files that changed from the base of the PR and between a3aaaec and 3153bc1.

📒 Files selected for processing (1)

• README.md

---

Walkthrough

在 README.md 文件顶部新增一个“MseeP.ai Security Assessment”安全评估徽标的链接图片，其余内容未发生实质变化。

Changes

README 徽标更新

Layer / File(s)	Summary
添加安全评估徽标 README.md	在文件开头插入 MseeP.ai 安全评估徽标的链接图片。

Estimated code review effort: 1 (Trivial) | ~2 minutes

Related issues: 未在提供信息中找到相关联的 issue。

Related PRs: 未在提供信息中找到相关联的 PR。

Suggested labels: documentation

Suggested reviewers: 未提供相关信息，无法给出建议。

Poem

一只兔子蹦蹦跳，
README 头顶添徽章，
安全评估亮闪闪，
两行文字轻轻放，
静待读者细端详。

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	标题准确概括了此次变更：为 README 添加 MseeP.ai 徽标。
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

Warning

⚠️ This pull request has been flagged as potential spam (promotional) by CodeRabbit slop detection and should be reviewed carefully.

[gemini-code-assist]

Code Review

This pull request adds a security assessment badge to the top of the README.md file. The feedback suggests moving this badge below the banner image to group it with other badges and maintain a proper visual hierarchy.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

Placing the badge above the main title disrupts the document's visual hierarchy. For better consistency and layout, badges should be grouped together. Consider moving this badge below the banner image, alongside the other existing badges (such as License, Node.js, and TypeScript).

[sourcery-ai]

嗨，我已经审查了你的改动，一切看起来很棒！

---

Sourcery 对开源项目是免费的——如果你觉得我们的审查有帮助，请考虑分享 ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{帮我变得更有用！请在每条评论上点 👍 或 👎，我会根据这些反馈改进为你提供的审查。}

Original comment in English

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}