Back to search
D
40 /100

io.github.emiliaprotocol/mcp-server

Scanned 86d ago

EMILIA Protocol MCP Server — trust enforcement for high-risk actions via MCP. Pre-action binding, policy-bound verification, and accountable human signoff.

Versions

No versions found.

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

ep_verify_receipt
annotations: verified low

Check an EP-RECEIPT-v1 with pure public-key math — Ed25519 over

document record public_key string
readOnlyHint true openWorldHint false destructiveHint false
ep_verify_signoff
annotations: verified low

Check a WebAuthn assertion (ECDSA P-256) whose challenge is the

readOnlyHint true openWorldHint false destructiveHint false
sendWire
annotations: none low

Send an outgoing wire

readUntrustedEmail
annotations: none low

sendExternalWebhook
annotations: none low

deployToProduction
annotations: none low

commentedVercel
annotations: none low

not Genkit and has no literal action name

Permissions 5

network Server uses network capabilities via: fetch(), http, httpx, requests, urllib
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile
low
shell Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
high
database Server uses database capabilities via: pg
medium
env_vars Server uses env_vars capabilities via: os.environ, process.env
low

Scan Findings 332

medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-native dependency_analyzer · 60%
info
Tool 'ep_verify_receipt' annotations are consistent annotation_checker · 80%
info
Tool 'ep_verify_signoff' annotations are consistent annotation_checker · 80%
low
Tool 'sendWire' has no annotations annotation_checker · 100%
low
Tool 'readUntrustedEmail' has no annotations annotation_checker · 100%
low
Tool 'sendExternalWebhook' has no annotations annotation_checker · 100%
low
Tool 'deployToProduction' has no annotations annotation_checker · 100%
low
Tool 'commentedVercel' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/tests/index.test.js auth_checker · 95%
high
Hardcoded OAuth client secret in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/tests/index.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 85 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-3x9f-74h4-2fqr) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-4r6h-8v6p-xvw6) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-5pgg-2g8v-p4x9) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-8vcr-vxm8-293m) dependency_analyzer · 95%
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-g973-978j-2c3p) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-2g6r-c272-w58r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-6qv9-48xg-fc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-926x-3r5x-gfhw) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-c67j-w6g6-q2cm) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-h59x-p739-982c) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-q84m-rmw3-4382) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-qh6h-p6c9-ff54) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2024-45) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-1518) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-1519) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2193) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2562) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2563) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-373) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-3ww4-gg4f-jr7f) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-cf7p-gm2m-833m) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-jfhm-5ghh-2f97) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-jm77-qphf-c4w8) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (GHSA-v8gr-m533-ghj9) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2023-112) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2023-254) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2024-225) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-1283) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/cloudflare/circl@1.6.1 (GHSA-q9hv-hpm4-hj6x) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/cloudflare/circl@1.6.1 (GO-2026-4550) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.10.0 (GO-2026-5024) dependency_analyzer · 95%
medium
High-entropy string (5.91 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:45 entropy_analyzer · 53%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:98 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:135 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:156 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:172 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:186 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:195 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:199 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:212 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:227 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:234 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:254 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:267 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:274 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:291 entropy_analyzer · 80%
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:319 entropy_analyzer · 80%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/pq-custody-aws-kms.ts:315 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:180 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:302 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:306 entropy_analyzer · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/guard-evidence-receipt.ts:83 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/custody-signers.ts:201 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/webauthn.ts:147 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/key-custody.ts:62 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/key-custody.js:35 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:31 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:38 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:49 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:57 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:70 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:89 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:21 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:27 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:37 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:44 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:54 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:71 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.js:59 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.ts:65 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:30 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-store.test.ts:297 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reconstitution.test.ts:370 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/signatures.test.ts:143 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/approval-acquisition-token.test.ts:109 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-hybrid.test.ts:122 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-hybrid.test.ts:129 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/approval-acquisition-migration-contract.test.ts:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:26 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:30 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-mobile-production.mts:43 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:33 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:36 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:37 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:44 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:46 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:49 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:52 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-fips-policy.test.ts:109 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-fips-policy.test.ts:116 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-claims.test.ts:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/npm-package-dependency-registry.test.ts:59 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/npm-package-dependency-registry.test.ts:66 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:157 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:159 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:161 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-routes.test.ts:199 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:149 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:151 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:155 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit.test.ts:312 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/replay.test.ts:82 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/custody-signers.test.ts:23 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/gate-qualification-dsse-hybrid-gate.test.ts:112 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/gate-qualification-dsse-hybrid-gate.test.ts:123 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/aec-mutation-oracles.test.ts:47 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/aec-mutation-oracles.test.ts:51 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/formal/check-bounded-execution-program-v1.mjs:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/formal/check-gate-qualification-v2.mjs:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-04.mjs:10 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:18 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-mobile-production.mjs:42 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-docs-secrets.js:96 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/replay-protocol.ts:723 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-05.mjs:10 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-frozen-clean-room.mjs:20 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-docs-secrets.ts:106 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-06.mjs:10 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-frozen-clean-room.mts:20 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/replay-protocol.js:593 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:15 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/demo.test.mjs:255 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/dai-profile.mjs:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/fixtures.mjs:84 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt/sync-emilia-fixture.mjs:59 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt/sync-emilia-fixture.mjs:61 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/claude-code/mint-poc-receipt.mjs:48 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/claude-code/mint-poc-receipt.mts:47 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:124 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:144 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:193 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:39 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:42 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:44 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:45 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:46 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/mobile/attestation.ts:120 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.ts:110 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.ts:130 entropy_analyzer · 75%
medium
High-entropy string (6.00 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.test.ts:156 entropy_analyzer · 54%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:17 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:28 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:63 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:74 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-wimse-oauth-adapter.ts:694 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:92 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:103 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:117 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:128 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:143 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:159 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:176 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:187 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:202 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:213 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:224 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:240 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:257 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:287 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:308 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:350 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:364 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:379 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:390 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:404 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:24 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/apps/consequence-actuator-service/src/github-deployment-queue.ts:97 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/caplease-emilia-v0.1/run.mjs:259 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/closed-ledger-reconciliation-v0.1/run.mjs:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/hawkins-funds-authority-v0.1/run.mjs:73 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/ccs-oasnt-aeb-v1/run.mjs:270 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/ccs-oasnt-aeb-v1/run.mts:380 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/chap-aeb-v1/run.mjs:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/jesske-ai-enablement-v0.1/run.test.mjs:18 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:155 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:42 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:174 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:40 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-oasnt-adapter.test.js:22 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:80 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:530 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:555 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-oasnt-adapter.test.ts:43 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:257 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:258 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:259 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/memory-projection.test.js:167 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:345 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:346 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:347 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-acceptance-profile.test.js:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/trust-receipt-knobs.test.ts:278 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/test.js:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/trust-receipt-knobs.test.js:243 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:41 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:428 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:447 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-acceptance-profile.test.ts:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:140 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:154 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:155 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:156 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/qualify/cli.test.mjs:86 entropy_analyzer · 75%
medium
High-entropy string (5.70 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/packages/scan/authority.test.mjs:102 entropy_analyzer · 50%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.ts:13 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.ts:25 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.js:14 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.js:26 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:807 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:48 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:49 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:50 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-psea-adapter.ts:348 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-wimse-oauth-adapter.ts:751 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-chap-adapter.ts:163 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-chap-adapter.ts:312 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/gate-qualification.ts:225 entropy_analyzer · 75%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/gate-qualification.ts:1267 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/python-verify/tests/test_verify.py:68 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/python-verify/tests/test_witness.py:79 entropy_analyzer · 70%
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:229 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:19 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:21 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:23 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:25 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:27 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:29 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/app/verify/examples.ts:26 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/app/verify/examples.ts:43 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: ep_verify_receipt manifest_parser · 85%
info
Tool: ep_verify_signoff manifest_parser · 85%
info
Tool: sendWire manifest_parser · 70%
info
Tool: readUntrustedEmail manifest_parser · 75%
info
Tool: sendExternalWebhook manifest_parser · 75%
info
Tool: deployToProduction manifest_parser · 75%
info
Tool: commentedVercel manifest_parser · 75%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (266) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/docs/operations/DISASTER_RECOVERY_RUNBOOK.md secret_scanner · 85%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1675 components sbom_generator · 100%
high
Hardcoded Password found in emiliaprotocol-emilia-protocol-6f4735c/lib/auth-strength.ts secret_scanner · 65%
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/infrastructure/aws/template.yaml secret_scanner · 85%
critical
RSA Private Key found in emiliaprotocol-emilia-protocol-6f4735c/conformance/vectors/generate-resolution.mts secret_scanner · 95%
critical
RSA Private Key found in emiliaprotocol-emilia-protocol-6f4735c/conformance/vectors/generate-resolution.mjs secret_scanner · 95%
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/deploy/airgap/docker-compose.airgap.yml secret_scanner · 85%
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/.github/workflows/mobile-apps.yml secret_scanner · 85%