← Back to search

com.kage-core/kage

kage-core Scanned 28d ago

Verified memory for coding agents: claims cited against code, stale withheld, savings receipts.

MCP Registry ↗
? Not scanned yet

Versions

2.0.1latest
first seen Jun 21, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 49

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.2 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.2 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.2 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-3c8v-cfp5-9885) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-4f78-qhmw-8j8m) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-4p4r-m79c-wq3v) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-532v-xpq5-8h95) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-5c9j-mhmv-5xgx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-5rqw-r77c-jp79) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-8337-3p73-46f4) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-8x5q-pvf5-64mp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-9899-m83m-qhpj) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-9f4c-93c8-jc8g) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-9pf5-hg6p-4pwp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-9w97-2464-8783) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-9wfr-w7mm-pc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-f2r8-jv7c-xqmp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-f37v-82c4-4x64) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-f3pv-wv63-48x8) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-ff2p-hmqr-hxm4) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-h7rp-cf8h-j98x) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-jfqx-fxh3-c62j) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-jjp3-mq3x-295m) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-jm7p-cc5g-qwxx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-m55f-7gqj-fr98) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-mwmh-mq4g-g6gr) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-p2rr-rvmm-c5fp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-pfmc-3mgc-p6fp) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-r5p7-gp4j-qhrx) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-v3j7-r9gq-3gjw) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-v64r-4m7r-3mvq) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-v93f-fgjr-hjrj) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-vmqv-hx8q-j7mg) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-x8rc-wpg4-grpf) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-xj5x-m3f3-5x3h) dependency_analyzer · 95%
medium
Vulnerable dependency: electron@33.0.0 (GHSA-xwr5-m59h-vwqr) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (32) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 436 components sbom_generator · 100%
high
Hardcoded Password found in kage-core-Kage-e7cc087/shell/README.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%