Is WorkWit-AI-Agent safe to install?

Security audit of crane-in-clear-sky/WorkWit-AI-Agent · MCP Server by crane-in-clear-sky · ★ 88

⚠ CAUTION Basic audit · rule-based scan · 42 published rules

Use with caution — WorkWit-AI-Agent triggered warning flags in AgentSkillsHub's security scan. It may be fine for personal trials, but review its credential handling and maintainer before brand or production use.

What it is: WorkWit: a self-hosted, open-source (MIT) enterprise AI Agent platform for office automation — built-in contract review & resume screening, 40+ skills, MCP connectors, multi-tenant RBAC. Deploy with one Docker Compose.

Red flags detected (1)

Audit summary

Security grade⚠ CAUTION
Quality score52/100
GitHub stars88
LanguagePython
Last updated

Check before you install

Run a live scan → Full details & install 5-dimension deep audit

Related MCP Server audits

Browse all MCP Server skills →

This is AgentSkillsHub's free basic audit: an automated rule-based scan with 42 published rules built on SlowMist's agent-security taxonomy (credential theft, obfuscated payloads, privilege escalation, covert instructions to the agent, and more) across 186,000+ open-source AI agent skills and MCP servers, refreshed every 8 hours. A CAUTION grade is a scan result, not a guarantee — deep 5-dimension audits (code · credentials · vendor · supply-chain · operational) are available for enterprise. Audited: 2026-10-22.