io.github.CSOAI-ORG/writing-assistant-ai-mcp

The materials explicitly state that no keys or environment variables are required, and there is no indication of API keys, OAuth tokens, or local sensitive credentials being requested; based on the available facts, credential exposure or abuse risk appears low.

The declared remote endpoints are 'none', and the description does not mention external APIs, cloud services, or telemetry upload; based on the current materials, there is no factual indication that user data is sent to third parties.

The system checks indicate this tool has code-execution capability, meaning it can run code/processes in the local environment as an MCP tool; this is a normal capability for such tools, and there is no evidence of system privileges beyond its stated writing-assistant purpose, but it should still be treated cautiously as a locally executing tool.

The materials do not declare any need to read/write specific local files, databases, the clipboard, or other sensitive resources, and the stated functionality is limited to text generation and scoring; there is currently no clear sign of excessive data access.

Positive indicators include an official registry source, an open-source repository, and updates within the last year; however, the lack of a README, no declared license, and very low adoption (0 stars) limit audit context and maturity, so supply-chain confidence is only moderate and source/dependency review is advisable.