- Reliability 3/20
- The supplied material contains no cached server manifest, MCP initialization flow, tool list, or committed test evidence. The README primarily describes a local agent that connects to external MCP servers, not a declared MCP server itself. Handshake behavior, tool contracts, error handling, and key execution paths therefore cannot be verified, so the static calibration requires a substantial deduction.
- Security and permissions 10/20
- The README states that shell, filesystem writes, patches, HTTP requests, process termination, and untrusted MCP tools are approval-gated, and it discloses local state and network-egress categories. Points are deducted because implementation evidence and precise least-privilege boundaries are absent; skills and shell inherit the agent environment including .env secrets, and the README explicitly says redaction is not complete isolation. Browser, arbitrary HTTP, and external MCP data flows remain configuration- and approval-dependent.
- Maintenance 10/20
- The supplied facts indicate that the project is not archived, has an MIT license, GitHub issue and release workflow references, and a version entry, while identifying the software as a developer preview. Points are deducted because there is no commit history, maintainer-response evidence, dependency-update policy, security-response channel, or stability record; the README says APIs, commands, and configuration are still changing.
- Documentation 13/20
- The README covers installation, execution, platform requirements, configuration, secret storage, capabilities, privacy and egress, limitations, troubleshooting, and several usage modes, including an MCP client configuration example. Points are deducted because there is no server manifest, concrete tool parameter/return contract, mainstream MCP-client connection example, or verifiable test evidence; it also documents developer-preview status and platform constraints.
- Setup experience 8/20
- The material provides installers for macOS/Linux and Windows, a run command, state-directory configuration, and an MCP client configuration snippet. Points are deducted because operation depends on Node, llama-server, Chromium, git, and additional model/browser setup, and the material does not demonstrate that this repository can run as an MCP server for mainstream clients. No manifest or standard MCP server launch configuration is supplied.