← Back to search Server uses network capabilities via: fetch() Server uses filesystem capabilities via: fs, os, path, pathlib Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess Server uses env_vars capabilities via: os.environ, process.env
NowAIKit — ServiceNow AI Toolkit
ServiceNow MCP server — 450+ tools (ITSM, ITOM, CMDB, scripting) for Claude, ChatGPT & any AI.
? Not scanned yet
Versions
2.5.3latestfirst seen Jun 5, 2026
3.1.0first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 46
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-4f78-qhmw-8j8m)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-5c9j-mhmv-5xgx)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-9f4c-93c8-jc8g)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-9pf5-hg6p-4pwp)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-f2r8-jv7c-xqmp)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-ff2p-hmqr-hxm4)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-h7rp-cf8h-j98x)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-jm7p-cc5g-qwxx)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-m55f-7gqj-fr98)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-p2rr-rvmm-c5fp)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-pfmc-3mgc-p6fp)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-r4w5-6pfg-jxp5)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-v3j7-r9gq-3gjw)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-v64r-4m7r-3mvq)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-v93f-fgjr-hjrj)
medium
Vulnerable dependency: electron@41.1.0 (GHSA-x8rc-wpg4-grpf)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.7 (GHSA-xcj6-pq6g-qj4x)
medium
Buffer.from base64 in aartiq-nowaikit-5b10091/src/servicenow/client.ts:1247
info
package.json metadata
info
Transport: stdio
info
Required env vars (66)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 794 components
high
Hardcoded Password found in aartiq-nowaikit-5b10091/desktop/BUILDING.md
high
Hardcoded Password found in aartiq-nowaikit-5b10091/clients/claude-code/SETUP.md
high
Hardcoded Password found in aartiq-nowaikit-5b10091/src/cli/auth.ts
medium
No build provenance detected (SLSA L0)