← Back to search

Flashcards Open Source App

kirill-markin streamable_http Scanned 21d ago

Read and write open-source flashcards and decks through split read/write MCP tools.

MCP Registry ↗
? Not scanned yet

Versions

1.14.0latest
first seen Jun 30, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops, open(), os, pathlib, tempfile
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 99

high
Hardcoded API key in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/telemetry/langfuse.test.ts auth_checker · 90%
high
Hardcoded API key in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/observability/sanitizer.test.ts auth_checker · 90%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 55 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/apiContracts/mediaAssets.test.ts:17 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:57 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:89 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:92 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:122 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:132 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:135 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:143 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:146 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:169 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:172 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:180 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:183 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:191 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:201 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:204 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:212 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:215 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:248 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:251 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:298 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:301 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:325 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:328 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:362 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:437 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:440 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:448 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:451 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:459 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:529 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/localDb/mediaTransfers/mediaTransfers.test.ts:532 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/api/endpoints/mediaAssets.test.ts:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/api/endpoints/mediaAssets.test.ts:96 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/api/endpoints/mediaAssets.test.ts:105 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/appData/sync/mediaUploads/mediaUploadTransferTestSupport.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/screens/review/tests/controls/ReviewScreen.editor-media-actions.test.tsx:172 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/screens/review/tests/controls/ReviewScreen.editor-media-actions.test.tsx:175 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/screens/review/tests/controls/ReviewScreen.editor-media-actions.test.tsx:230 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/screens/review/tests/controls/ReviewScreen.editor-media-actions.test.tsx:233 entropy_analyzer · 70%
medium
High-entropy string (5.88 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/ja.ts:371 entropy_analyzer · 53%
medium
High-entropy string (5.79 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/ja.ts:423 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/ja.ts:852 entropy_analyzer · 50%
medium
High-entropy string (6.24 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/ja.ts:937 entropy_analyzer · 58%
medium
High-entropy string (5.97 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/ja.ts:1372 entropy_analyzer · 54%
medium
High-entropy string (5.73 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/zh-Hans.ts:423 entropy_analyzer · 50%
medium
High-entropy string (6.26 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/web/src/i18n/catalogs/zh-Hans.ts:937 entropy_analyzer · 58%
high
Long unicode escape chain in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/shared/tagKey.ts:6 entropy_analyzer · 80%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/routes/guestAuth.test.ts:191 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/server/app.test.ts:275 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/chat/attachmentPolicy.ts:160 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/index.test.ts:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/entrypoints/scheduledJobs/lambda-generated-media-promotion.test.ts:235 entropy_analyzer · 70%
medium
High-entropy string (5.74 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/community/leaderboard/streak/streakLeaderboard.ts:134 entropy_analyzer · 51%
medium
High-entropy string (5.92 bits/char) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/community/leaderboard/streak/streakLeaderboard.ts:150 entropy_analyzer · 53%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/catalog/distribution/public/media.test.ts:23 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/billing/apple/provider.ts:103 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/sync/conflicts/conflict.test.ts:351 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/sync/contracts/inputTestSupport.ts:25 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/sync/replication/push.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/chat/cardImages/operation.postgres.integration.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/chat/cardImages/promotion/jobsPostgresTestSupport.ts:75 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/chat/cardImages/provider/openaiAdapter.ts:489 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/persistence/snapshots.test.ts:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/uploadSessions/index.test.ts:19 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/storage/proof.ts:23 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/storage/testHelpers.ts:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/storage/testHelpers.ts:23 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/storage/multipart/reconciliation.promotion.test.ts:374 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/mediaAssets/blobLifecycle/cleanup/processor.test.ts:18 entropy_analyzer · 70%
medium
Buffer.from base64 in kirill-markin-flashcards-open-source-app-cafb497/infra/aws/lambda/custom-email-sender/index.ts:294 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/scripts/deploy/migrate-monitoring-stack.py:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/scripts/deploy/migrate-monitoring-stack.py:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in kirill-markin-flashcards-open-source-app-cafb497/scripts/deploy/migrate-monitoring-stack.py:42 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (82) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 741 components sbom_generator · 100%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/docs/analytics-db-access.md secret_scanner · 85%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/admin/reportingDb.ts secret_scanner · 85%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/database/config.ts secret_scanner · 85%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/apps/backend/src/database/migrationRunner.ts secret_scanner · 85%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/apps/auth/src/config.ts secret_scanner · 85%
critical
Database URL with Password found in kirill-markin-flashcards-open-source-app-cafb497/infra/docker/compose.yml secret_scanner · 85%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%