REPOGEO REPORT · LITE

slowmist/MCP-Security-Checklist

Default branch main · commit 8c892263 · scanned 6/9/2026, 4:47:56 AM

GitHub: 830 stars · 71 forks

AI VISIBILITY SCORE

22 /100

Critical

Category recall

0 / 2

Not recommended in any query

Rule findings

1 pass · 1 warn · 0 fail

Objective metadata checks

AI knows your name

1 / 3

Direct prompts that named your repo

HOW TO READ THIS REPORT

Action plan is what to do next — copy-pasteable changes prioritized by impact. Category visibility is the real GEO test: when a user asks an AI a brand-free question that should surface slowmist/MCP-Security-Checklist, does the AI actually recommend you — or your competitors? Objective checks verify the metadata signals AI engines weight first. Self-mention check detects whether AI even knows you exist by name.

Action plan — copy-paste fixes

3 prioritized changes generated by gemini-2.5-flash. Mark items done after you ship the fix.

OVERALL DIRECTION

hightopics#1

Add relevant topics to the repository

Why:

COPY-PASTE FIX

ai, llm, large-language-models, plugins, security, checklist, model-context-protocol, mcp, slowmist, cybersecurity

highreadme#2

Reposition the explicit definition of 'Model Context Protocol (MCP)' in the README's opening

Why:

COPY-PASTE FIX

This repository provides a comprehensive security checklist for AI tools built on the Model Context Protocol (MCP) standard, designed by SlowMist to safeguard LLM plugin ecosystems.

mediumhomepage#3
Add a homepage URL to the repository metadata
Why:
COPY-PASTE FIX
```
https://www.slowmist.com/en/
```

Category GEO backends resolved for this scan: google/gemini-2.5-flash, deepseek/deepseek-v4-flash

Category visibility — the real GEO test

Brand-free queries asked to google/gemini-2.5-flash. Did AI recommend you, or someone else?

Same questions for every model — switch tabs to compare answers and rankings.

Recall

0 / 2

0% of queries surface slowmist/MCP-Security-Checklist

Avg rank

—

Lower is better. #1 = top recommendation.

Share of voice

Of all named tools, what % are you?

Top rival

OAuth 2.0

Recommended in 1 of 2 queries

COMPETITOR LEADERBOARD

OAuth 2.0 · recommended 1×
TLS · recommended 1×
AES-256 · recommended 1×
HTTPS · recommended 1×
OpenAI · recommended 1×

CATEGORY QUERY
What are the essential security considerations for deploying large language model plugins?
you: not recommended
AI recommended (in order):
1. OAuth 2.0
2. TLS
3. AES-256
4. HTTPS
5. OpenAI
6. Google Cloud AI
7. Azure AI Content Safety
AI recommended 7 alternatives but never named slowmist/MCP-Security-Checklist. This is the gap to close.
Show full AI answer
CATEGORY QUERY
Where can I find a comprehensive security guide for building AI tool ecosystems?
you: not recommended
AI recommended (in order):
1. AI Risk Management Framework (AI RMF 1.0)
2. SP 800-218
3. AI 100-1
4. OWASP Top 10 for Large Language Model Applications (LLM Top 10)
5. Microsoft Azure AI Security Best Practices
6. Google Cloud AI Security Best Practices
7. AWS Machine Learning Security Best Practices
8. MITRE ATLAS (Adversarial Threat Landscape for Artificial-Intelligence Systems)
9. Hugging Face Security Best Practices
AI recommended 9 alternatives but never named slowmist/MCP-Security-Checklist. This is the gap to close.
Show full AI answer

Objective checks

Rule-based audits of metadata signals AI engines weight most.

Metadata completeness
warn
Suggestion:
README presence
pass

Self-mention check

Does AI even know your repo exists when asked about it directly?

Compared to common alternatives in this category, what is the core differentiator of slowmist/MCP-Security-Checklist?
pass
AI did not name slowmist/MCP-Security-Checklist — likely talking about a different project
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?
If a team adopts slowmist/MCP-Security-Checklist in production, what risks or prerequisites should they evaluate first?
pass
AI named slowmist/MCP-Security-Checklist explicitly
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?
In one sentence, what problem does the repo slowmist/MCP-Security-Checklist solve, and who is the primary audience?
pass
AI did not name slowmist/MCP-Security-Checklist — likely talking about a different project
AI answers can be confidently wrong. Read for accuracy: does it match your actual tech stack, audience, and differentiator?

Embed your GEO score

Drop this badge into the README of slowmist/MCP-Security-Checklist. It auto-updates whenever the report is rescanned and links back to the latest report — easy public proof that you care about AI discoverability.

Live preview

MARKDOWN (README)

[![RepoGEO](https://repogeo.com/badge/slowmist/MCP-Security-Checklist.svg)](https://repogeo.com/en/r/slowmist/MCP-Security-Checklist)

HTML

<a href="https://repogeo.com/en/r/slowmist/MCP-Security-Checklist"><img src="https://repogeo.com/badge/slowmist/MCP-Security-Checklist.svg" alt="RepoGEO" /></a>

Pro

Subscribe to Pro for deep diagnoses

slowmist/MCP-Security-Checklist — Lite scans stay free; this card itemizes Pro deep limits vs Lite.

Deep reports10 / month
Brand-free category queries5 vs 2 in Lite
Prioritized action items8 vs 3 in Lite