Trust Score for CarsXE

Trust Score 89 out of 100. Security label: safe. Computed with methodology version 2026-10-21. A scan is not a safety guarantee.

Component scores

Trust Score components for CarsXE
ComponentScoreWeightPoints
Security10040%40.0
Provenance7020%14.0
Installability10015%15.0
MCP posture10010%10.0
Publisher7510%7.5
Maintenance455%2.3

How the total is reached

  1. Weighted sum of the components: 88.8.
  2. No cap applies.
  3. No adjustments apply.
  4. Result: 89.

Security scan

  • Scanner: static fallback scan, not a live exploit test.
  • Listing last updated 2026-09-24 (29 days ago).
  • Findings: 17, of which 0 high or critical.
  • Security checks in the source CI: maintained, checked 2026-10-15.
Scan findings for CarsXE
SeverityFindingPath
infoCisco skill scanner timed out after 60000 msskills/auth
infoCisco skill scanner timed out after 60000 msskills/international-vin
infoCisco skill scanner timed out after 60000 msskills/lien-theft
infoCisco skill scanner timed out after 60000 msskills/market-value
infoCisco skill scanner timed out after 60000 msskills/obd-decoder
infoCisco skill scanner timed out after 60000 msskills/ownership
infoCisco skill scanner timed out after 60000 msskills/plate-decoder
infoCisco skill scanner timed out after 60000 msskills/plate-image-recognition
infoCisco skill scanner timed out after 60000 msskills/recalls-batch
infoCisco skill scanner timed out after 60000 msskills/recalls-ymm
infoCisco skill scanner timed out after 60000 msskills/vehicle-history
infoCisco skill scanner timed out after 60000 msskills/vehicle-images
infoCisco skill scanner timed out after 60000 msskills/vehicle-recalls
infoCisco skill scanner timed out after 60000 msskills/vehicle-specs
infoCisco skill scanner timed out after 60000 msskills/vin-ocr
infoCisco skill scanner timed out after 60000 msskills/year-make-model
infoCisco skill scanner timed out after 60000 msskills/ymm-options

Ownership and provenance evidence

  • Source commit pinned: Yes
  • Manifest digest verified: Yes
  • Domain proof: No
  • Publisher verified: No
  • Owner verified on HOL: Yes, since 2026-07-06

GitHub activity

  • Stars: 0
  • Forks: 0
  • Open issues: 2
  • Last push: 2026-10-01

Fetched 2026-10-14. GitHub activity is context only and is not part of the Trust Score.

Score history

Trust Score history for CarsXE
RecordedTrust Score
89

A row appears when the reported score changes. Dates are when HOL recorded the score, not when the scan ran.

Limitations

The scan reads source files and manifests; it does not run the plugin. Score history starts on 23 October 2026 and covers the listings HOL records daily. Memberships, paid placements and upvotes are not inputs. See the full methodology for every rule, or go back to CarsXE.