No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by malloydata · MCP Server · ★ 114
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is publisher safe to install? View the security audit →
Malloy Publisher The Analytics Engine for Malloy A post modern data stack — built for the AI era. One data model, served over MCP and REST to AI agents, applications, and BI tools. Created and maintained by Credible, the company behind the AI Analytics Engine. AI agents: read AGENTS.md first (raw: https://raw.githubusercontent.com/malloydata/publisher/main/AGENTS.md). It covers starting the server, connecting over MCP, the bundled skills, and the package format. Fetch the raw file, not a summary of this page. A 60-second walkthrough — model in your IDE with the Malloy skills, serve with Publisher, build a data app, materialize on a schedule, and analyze. <a href="https://git
| Stars | 114 |
| Forks | 27 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 65.0347844209862/100 |
| Open Issues | 88 |
| Last Updated | 2026-10-02 |
| Created | 2024-09-16 |
| Platforms | mcp, node |
| Est. Tokens | ~18k |
These tools work well together with publisher for enhanced workflows:
Looking for a publisher alternative? If you're comparing publisher with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Remote approvals, policy checks, and execution evidence for unattended AI agents.
Google Analytics 4 data to AI agents, agentic workflows, and MCP clients. Give agents analysis-ready access to
Forge Orchestrator: Multi-AI task orchestration. File locking, knowledge capture, drift detection. Rust.
MCPcat is an analytics platform for MCP server owners 🐱.
Governance gateway for AI agents — bounded, auditable, session-aware control with MCP proxy, shell proxy & HTT
Metabase MCP server provides integration with the Metabase API, enabling LLM with MCP capabilites to directly
Explore other popular mcp server tools:
publisher is Publisher is the open-source analytics engine for Malloy. It lets you define data models once — and use them everywhere.. It is categorized as a MCP Server with 114 GitHub stars.
publisher is primarily written in TypeScript. It covers topics such as ai-agents, ai-governance, ai-tools.
You can find installation instructions and usage details in the publisher GitHub repository at github.com/malloydata/publisher. The project has 114 stars and 27 forks, indicating an active community.
publisher is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to publisher on Agent Skills Hub include DashClaw, google-analytics-mcp, forge-orchestrator. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: