low Tool 'send_task' has no annotations annotation_checker · 100%
low Tool 'get_task' has no annotations annotation_checker · 100%
low Tool 'list_tasks' has no annotations annotation_checker · 100%
low Tool 'cancel_task' has no annotations annotation_checker · 100%
low Tool 'pause_task' has no annotations annotation_checker · 100%
low Tool 'resume_task' has no annotations annotation_checker · 100%
low Tool 'retry_task' has no annotations annotation_checker · 100%
low Tool 'list_agents' has no annotations annotation_checker · 100%
low Tool 'search_agent' has no annotations annotation_checker · 100%
low Tool 'get_agent_card' has no annotations annotation_checker · 100%
low Tool 'get_agent_status' has no annotations annotation_checker · 100%
low Tool 'check_balance' has no annotations annotation_checker · 100%
low Tool 'request_topup' has no annotations annotation_checker · 100%
low Tool 'connect_task' has no annotations annotation_checker · 100%
low Tool 'download_artifact' has no annotations annotation_checker · 100%
medium OAuth implementation without PKCE auth_checker · 75%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Excessive dependency count: 71 direct dependencies dependency_analyzer · 90%
medium Suspicious package name: react-dom dependency_analyzer · 60%
medium Suspicious package name: react-markdown dependency_analyzer · 60%
medium Vulnerable dependency: vitest@3.2.4 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@3.2.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium Vulnerable dependency: rollup@4.0.0 (GHSA-gcx4-mw62-g8wm) dependency_analyzer · 95%
medium Vulnerable dependency: rollup@4.0.0 (GHSA-mw96-cpmx-2vgc) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@1.6.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@1.6.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.3 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.3 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium Vulnerable dependency: pubnub@10.6.0,<11 (GHSA-5844-q3fc-56rh) dependency_analyzer · 95%
medium Vulnerable dependency: pubnub@10.6.0,<11 (PYSEC-2026-1807) dependency_analyzer · 95%
medium Vulnerable dependency: python-dotenv@1.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium Vulnerable dependency: python-dotenv@1.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/sys@0.41.0 (GO-2026-5024) dependency_analyzer · 95%
medium Buffer.from base64 in blocksnetwork-blocks-sdk-7e8032b/sdks/node/tests/stream-stream-bundle.test.ts:440 entropy_analyzer · 75%
medium Buffer.from base64 in blocksnetwork-blocks-sdk-7e8032b/examples/node/orchestrator/handler.ts:81 entropy_analyzer · 75%
info package.json metadata manifest_parser · 100%
info pyproject.toml metadata manifest_parser · 100%
info Tool: send_task manifest_parser · 70%
info Tool: get_task manifest_parser · 70%
info Tool: list_tasks manifest_parser · 70%
info Tool: cancel_task manifest_parser · 70%
info Tool: pause_task manifest_parser · 70%
info Tool: resume_task manifest_parser · 70%
info Tool: retry_task manifest_parser · 70%
info Tool: list_agents manifest_parser · 70%
info Tool: search_agent manifest_parser · 70%
info Tool: get_agent_card manifest_parser · 70%
info Tool: get_agent_status manifest_parser · 70%
info Tool: check_balance manifest_parser · 70%
info Tool: request_topup manifest_parser · 70%
info Tool: connect_task manifest_parser · 70%
info Tool: download_artifact manifest_parser · 70%
info Transport: stdio manifest_parser · 90%
info Required env vars (45) manifest_parser · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 80%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
info SBOM generated: 1051 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%