https://agentgatehouse.com/gate-log/ Every verdict, flag, and refusal from the Gatehouse registry. What's alive, what's tested, what got turned away. en-us https://agentgatehouse.com/gate-log/ https://agentgatehouse.com/gate-log/#2026-07-22-note Wed, 22 Jul 2026 00:00:00 GMT note The gate is now a tool an agent can install: npx -y gatehouse-mcp. Three read-only tools put it in the agent's own tool list. check_tool answers 'is this safe to install' with the vetting verdict, get_tool returns the full audit write-up, and search_tools finds tools ranked vetted first. It reads the same live registry the site does, so verdicts and liveness stay current. We ran our own audit on it, since a registry that flags others for phoning home cannot phone home itself. Three tools, all read-only, no writes and no deletes. Its only network call is one fetch to agentgatehouse.com for the registry, so it sends no telemetry about you or your queries. Always-on cost is 525 tokens per turn, against roughly 16k for a 44-tool server like posthog-mcp. One runtime dependency. It clears its own gate. https://agentgatehouse.com/tools/cc-skills/ https://agentgatehouse.com/gate-log/#2026-07-16-cc-skills Thu, 16 Jul 2026 00:00:00 GMT verdict Samuel Berthe's 20 skills: about 4,000 always-on tokens, no scripts, no telemetry, MIT. The catch is the default install loads all 20, and a few triggers (deep-research, frontend-design-deslop) are greedy. Install by name with --skill. https://agentgatehouse.com/tools/claude-code-subagents/ https://agentgatehouse.com/gate-log/#2026-07-16-claude-code-subagents Thu, 16 Jul 2026 00:00:00 GMT flag Seven subagents with useful prompts, flagged on packaging. Three inherit all tools (Bash and web) with no tools: line; security-auditor gets Write but no Read; project-task-planner is handed Bash and Write against its own 'never action tasks' rule. One commit from 2025, deprecated tool names. Copy the ones you review and pin each to least privilege. https://agentgatehouse.com/tools/kostja-marketing/ https://agentgatehouse.com/gate-log/#2026-07-16-kostja-marketing Thu, 16 Jul 2026 00:00:00 GMT flag 172 well-researched marketing skills, flagged on two counts: about 17,000 always-on tokens at full install (ten times Anthropic's pack), and ten skill bodies embed the author's own alignify.co as a reference so it surfaces in your output. Clean source, MIT. Install the few you need with --skill. https://agentgatehouse.com/tools/marketing-skills/ https://agentgatehouse.com/gate-log/#2026-07-16-marketing-skills Thu, 16 Jul 2026 00:00:00 GMT verdict Corey Haines's 47 marketing skills are well-built and clean of injected self-promo, but the full pack is about 8,000 always-on tokens (five times Anthropic's pack), and it bundles 64 opt-in CLI scripts that read vendor API keys. Install the few you need with --skill. https://agentgatehouse.com/tools/posthog-mcp/ https://agentgatehouse.com/gate-log/#2026-07-16-posthog-mcp Thu, 16 Jul 2026 00:00:00 GMT verdict The official PostHog MCP works and is honest about what it does, but it is not read-only: 18 of its 44 tools write and 5 delete production objects. The safety is real and server-enforced through the key's scopes, so mint a read-scoped personal API key unless you want an agent editing live feature flags. https://agentgatehouse.com/tools/vercel-agent-skills/ https://agentgatehouse.com/gate-log/#2026-07-16-vercel-agent-skills Thu, 16 Jul 2026 00:00:00 GMT verdict Vercel's nine first-party skills, carefully built: about 850 always-on tokens, secrets redacted, execFile not shell, no telemetry. The one thing to know: deploy-to-vercel tars your project and uploads it to an unauthenticated Vercel endpoint for a publicly claimable preview. It strips .env first and asks before pushing. https://agentgatehouse.com/tools/writing-humanizer/ https://agentgatehouse.com/gate-log/#2026-07-16-writing-humanizer Thu, 16 Jul 2026 00:00:00 GMT verdict One clean skill that strips AI tells from writing, about 145 always-on tokens. It ships inside a 68-skill collection that costs 32,000 tokens at --all -g, most of it auto-generated and untested. Vet the skill, not the dump: --skill writing-humanizer. https://agentgatehouse.com/tools/context7/ https://agentgatehouse.com/gate-log/#2026-07-12-context7 Sun, 12 Jul 2026 00:00:00 GMT verdict Works as advertised for fresh docs, but it's a thin client for a hosted service, so your query text goes to context7.com. Expected, disclosed, and now stated on the listing instead of buried in the source. https://agentgatehouse.com/tools/playwright-mcp/ https://agentgatehouse.com/gate-log/#2026-07-12-playwright-mcp Sun, 12 Jul 2026 00:00:00 GMT verdict A clean pass, and a rare one. Filesystem access is locked to your workspace and file:// is blocked unless you opt out. The caveat is what it is, not a flaw: it drives a real browser, so treat it accordingly. https://agentgatehouse.com/tools/sentry-mcp/ https://agentgatehouse.com/gate-log/#2026-07-12-sentry-mcp Sun, 12 Jul 2026 00:00:00 GMT verdict Official and well-built, with a sensible device-code login. The thing to be deliberate about: it pulls production error data, stack traces and PII included, into the model's context, and it ships its own telemetry DSN you can override. https://agentgatehouse.com/tools/serena/ https://agentgatehouse.com/gate-log/#2026-07-12-serena Sun, 12 Jul 2026 00:00:00 GMT verdict Language-server-backed edits that are precise and token-cheap on big repos. Remember it edits your code and writes memory files into the project; analytics stay local, and the one outbound call is a benign news fetch. https://agentgatehouse.com/tools/superpowers/ https://agentgatehouse.com/gate-log/#2026-07-12-superpowers Sun, 12 Jul 2026 00:00:00 GMT verdict A new method: skills are judged by what they cost you on every turn. superpowers (14 skills, ~577 always-on tokens) and anthropic-skills (17 skills, ~1,629) both passed, both lean and well-scoped. The measurement script now lives in the repo. https://agentgatehouse.com/tools/wshobson-agents/ https://agentgatehouse.com/gate-log/#2026-07-12-wshobson-agents Sun, 12 Jul 2026 00:00:00 GMT note The catalog is big: 88 plugins, 199 agents, 106 commands, and about 25.6k always-on tokens if you install all of it. Useful per agent, but a heavy context tax at full install, so pick the plugins you need. A behavioral audit of the agents is still pending. https://agentgatehouse.com/tools/postgres-mcp/ https://agentgatehouse.com/gate-log/#2026-07-11-postgres-mcp Sat, 11 Jul 2026 00:00:00 GMT verdict Restricted mode is genuinely read-only, held by two independent enforcement layers (pglast AST checks plus a real read-only transaction), and 66 of its own tests pass. One catch worth knowing: it isn't safe by default, so pin --access-mode restricted. https://agentgatehouse.com/gate-log/ https://agentgatehouse.com/gate-log/#2026-07-11-note Sat, 11 Jul 2026 00:00:00 GMT note First ten tools in intake: seven MCP servers, a plugin, a skill pack, and a subagent catalog. The vetting method is public. Install it, run it, audit what it injects.