Back to search
medium low high medium low
D
40 /100
io.github.emiliaprotocol/mcp-server
Author emiliaprotocol
Scanned 86d ago
EMILIA Protocol MCP Server — trust enforcement for high-risk actions via MCP. Pre-action binding, policy-bound verification, and accountable human signoff.
MCP Registry npm
Versions
No versions found.
Trust breakdown
Tools 7
ep_verify_receipt annotations: verified low
Check an EP-RECEIPT-v1 with pure public-key math — Ed25519 over
document record public_key string
readOnlyHint true openWorldHint false destructiveHint false
ep_verify_signoff annotations: verified low
Check a WebAuthn assertion (ECDSA P-256) whose challenge is the
readOnlyHint true openWorldHint false destructiveHint false
sendWire annotations: none low
Send an outgoing wire
readUntrustedEmail annotations: none low
sendExternalWebhook annotations: none low
deployToProduction annotations: none low
commentedVercel annotations: none low
not Genkit and has no literal action name
Permissions 5
network Server uses network capabilities via: fetch(), http, httpx, requests, urllib filesystem Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib, shutil, tempfile shell Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess database Server uses database capabilities via: pg env_vars Server uses env_vars capabilities via: os.environ, process.env Scan Findings 332
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-native
info
Tool 'ep_verify_receipt' annotations are consistent
info
Tool 'ep_verify_signoff' annotations are consistent
low
Tool 'sendWire' has no annotations
low
Tool 'readUntrustedEmail' has no annotations
low
Tool 'sendExternalWebhook' has no annotations
low
Tool 'deployToProduction' has no annotations
low
Tool 'commentedVercel' has no annotations
high
Hardcoded OAuth client secret in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/tests/index.test.js
high
Hardcoded OAuth client secret in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/tests/index.test.ts
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 85 direct dependencies
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-3x9f-74h4-2fqr)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-4r6h-8v6p-xvw6)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-5pgg-2g8v-p4x9)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-8vcr-vxm8-293m)
medium
Vulnerable dependency: xlsx@https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz (GHSA-g973-978j-2c3p)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-2g6r-c272-w58r)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-6qv9-48xg-fc7f)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-926x-3r5x-gfhw)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-c67j-w6g6-q2cm)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-h59x-p739-982c)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-pjwx-r37v-7724)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-q84m-rmw3-4382)
medium
Vulnerable dependency: langchain-core@0.3,<2 (GHSA-qh6h-p6c9-ff54)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2024-45)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-1518)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-1519)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2193)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2562)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2563)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-2564)
medium
Vulnerable dependency: langchain-core@0.3,<2 (PYSEC-2026-373)
medium
Vulnerable dependency: cryptography@41 (GHSA-3ww4-gg4f-jr7f)
medium
Vulnerable dependency: cryptography@41 (GHSA-537c-gmf6-5ccf)
medium
Vulnerable dependency: cryptography@41 (GHSA-6vqw-3v5j-54x4)
medium
Vulnerable dependency: cryptography@41 (GHSA-9v9h-cgj8-h64p)
medium
Vulnerable dependency: cryptography@41 (GHSA-cf7p-gm2m-833m)
medium
Vulnerable dependency: cryptography@41 (GHSA-h4gh-qq45-vh27)
medium
Vulnerable dependency: cryptography@41 (GHSA-jfhm-5ghh-2f97)
medium
Vulnerable dependency: cryptography@41 (GHSA-jm77-qphf-c4w8)
medium
Vulnerable dependency: cryptography@41 (GHSA-jwv3-5hgf-82ww)
medium
Vulnerable dependency: cryptography@41 (GHSA-m2h6-j472-rp4c)
medium
Vulnerable dependency: cryptography@41 (GHSA-m959-cc7f-wv43)
medium
Vulnerable dependency: cryptography@41 (GHSA-r6ph-v2qm-q3c2)
medium
Vulnerable dependency: cryptography@41 (GHSA-v8gr-m533-ghj9)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2023-112)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2023-254)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2024-225)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-1283)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-1285)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-2141)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-35)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-3553)
medium
Vulnerable dependency: cryptography@41 (PYSEC-2026-3554)
medium
Vulnerable dependency: github.com/cloudflare/circl@1.6.1 (GHSA-q9hv-hpm4-hj6x)
medium
Vulnerable dependency: github.com/cloudflare/circl@1.6.1 (GO-2026-4550)
medium
Vulnerable dependency: golang.org/x/sys@0.10.0 (GO-2026-5024)
medium
High-entropy string (5.91 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:45
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:98
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:135
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:156
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:172
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:186
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:195
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:199
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:212
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:227
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:234
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:254
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:267
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:274
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:291
high
Long unicode escape chain in emiliaprotocol-emilia-protocol-6f4735c/mcp-server/bundle.js:319
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/pq-custody-aws-kms.ts:315
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:180
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:302
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/commit.ts:306
medium
No build provenance detected (SLSA L0)
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/guard-evidence-receipt.ts:83
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/custody-signers.ts:201
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/webauthn.ts:147
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/key-custody.ts:62
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/key-custody.js:35
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:31
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:38
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:49
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:57
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:70
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:45
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.ts:89
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:21
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:27
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:37
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:44
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:54
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:34
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.test.js:71
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.js:59
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/attestation/tpm-quote-verifier.ts:65
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:27
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:28
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:29
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:30
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:31
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:32
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:33
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:34
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:35
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:36
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:37
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:38
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:39
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:40
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:42
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reliance-kernel.test.ts:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-store.test.ts:297
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/reconstitution.test.ts:370
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/signatures.test.ts:143
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/approval-acquisition-token.test.ts:109
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-hybrid.test.ts:122
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-hybrid.test.ts:129
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/approval-acquisition-migration-contract.test.ts:24
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:26
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:27
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:28
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:29
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:30
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-mobile-production.mts:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:31
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:32
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:33
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:34
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:35
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:36
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:37
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:38
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:39
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:40
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:42
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:44
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:45
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:46
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:47
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:48
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:49
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:50
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:51
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/authority-registry.test.ts:52
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-fips-policy.test.ts:109
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit-fips-policy.test.ts:116
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-claims.test.ts:21
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/npm-package-dependency-registry.test.ts:59
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/npm-package-dependency-registry.test.ts:66
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:157
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:159
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/clean-room-v2.test.ts:161
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/works-routes.test.ts:199
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:149
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:151
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/key-custody-signer.test.ts:155
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/commit.test.ts:312
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/replay.test.ts:82
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/custody-signers.test.ts:23
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/gate-qualification-dsse-hybrid-gate.test.ts:112
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/tests/gate-qualification-dsse-hybrid-gate.test.ts:123
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/aec-mutation-oracles.test.ts:47
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/tests/aec-mutation-oracles.test.ts:51
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/formal/check-bounded-execution-program-v1.mjs:31
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/formal/check-gate-qualification-v2.mjs:24
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-04.mjs:10
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:14
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:16
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mts:18
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-mobile-production.mjs:42
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-docs-secrets.js:96
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/replay-protocol.ts:723
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-05.mjs:10
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-frozen-clean-room.mjs:20
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-docs-secrets.ts:106
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-ae-challenge-06.mjs:10
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/check-frozen-clean-room.mts:20
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/scripts/replay-protocol.js:593
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:14
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:15
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/scripts/verify-clean-room-submission-v2.mjs:16
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/demo.test.mjs:255
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/dai-profile.mjs:24
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/apertoid-gate-dai/fixtures.mjs:84
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt/sync-emilia-fixture.mjs:59
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt/sync-emilia-fixture.mjs:61
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/claude-code/mint-poc-receipt.mjs:48
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/claude-code/mint-poc-receipt.mts:47
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:124
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:144
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/examples/scitt-registration/verify-inclusion.mjs:193
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:39
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:40
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:42
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:44
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:45
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/lib/works/seed.ts:46
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/mobile/attestation.ts:120
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.ts:110
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.ts:130
medium
High-entropy string (6.00 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/lib/agent-record/core.test.ts:156
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:17
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:28
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:63
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:74
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-wimse-oauth-adapter.ts:694
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:92
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:103
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:117
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:128
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:143
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:159
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:176
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:187
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:202
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:213
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:224
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:240
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:257
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:287
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:308
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:350
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:364
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:379
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:390
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/caid/interop/consequential-action-v1/targets.mjs:404
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:14
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:19
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/integrations/langchain-emilia/tests/test_digest.py:24
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/apps/consequence-actuator-service/src/github-deployment-queue.ts:97
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/caplease-emilia-v0.1/run.mjs:259
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/closed-ledger-reconciliation-v0.1/run.mjs:79
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/hawkins-funds-authority-v0.1/run.mjs:73
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/ccs-oasnt-aeb-v1/run.mjs:270
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/ccs-oasnt-aeb-v1/run.mts:380
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/chap-aeb-v1/run.mjs:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/conformance/composition/jesske-ai-enablement-v0.1/run.test.mjs:18
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:155
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.js:42
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:174
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:40
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/timestamp-proof.test.ts:41
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-oasnt-adapter.test.js:22
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:80
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:530
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.ts:555
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-oasnt-adapter.test.ts:43
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:257
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:258
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.js:259
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/memory-projection.test.js:167
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:345
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:346
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-ccs-adapter.test.ts:347
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-acceptance-profile.test.js:32
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/trust-receipt-knobs.test.ts:278
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/test.js:80
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/trust-receipt-knobs.test.js:243
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:41
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:428
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/gate-qualification.test.js:447
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/aeb-acceptance-profile.test.ts:65
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:140
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:154
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:155
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/go-verify/verify_test.go:156
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/qualify/cli.test.mjs:86
medium
High-entropy string (5.70 bits/char) in emiliaprotocol-emilia-protocol-6f4735c/packages/scan/authority.test.mjs:102
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.ts:13
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.ts:25
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.js:14
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/gate/siem.test.js:26
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:807
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:48
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:49
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-ccs-adapter.ts:50
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-psea-adapter.ts:348
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-wimse-oauth-adapter.ts:751
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-chap-adapter.ts:163
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/aeb-chap-adapter.ts:312
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/gate-qualification.ts:225
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/packages/verify/src/gate-qualification.ts:1267
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/python-verify/tests/test_verify.py:68
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/packages/python-verify/tests/test_witness.py:79
medium
Buffer.from base64 in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:229
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:19
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:21
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:23
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:25
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:27
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:29
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/interop/aae-psea-gate/reperform.mjs:31
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/app/verify/examples.ts:26
medium
Hex string literal (>50 chars) in emiliaprotocol-emilia-protocol-6f4735c/app/verify/examples.ts:43
info
package.json metadata
info
pyproject.toml metadata
info
Tool: ep_verify_receipt
info
Tool: ep_verify_signoff
info
Tool: sendWire
info
Tool: readUntrustedEmail
info
Tool: sendExternalWebhook
info
Tool: deployToProduction
info
Tool: commentedVercel
info
Transport: stdio
info
Required env vars (266)
info
Sandbox failed to start for output poisoning scan
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/docs/operations/DISASTER_RECOVERY_RUNBOOK.md
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1675 components
high
Hardcoded Password found in emiliaprotocol-emilia-protocol-6f4735c/lib/auth-strength.ts
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/infrastructure/aws/template.yaml
critical
RSA Private Key found in emiliaprotocol-emilia-protocol-6f4735c/conformance/vectors/generate-resolution.mts
critical
RSA Private Key found in emiliaprotocol-emilia-protocol-6f4735c/conformance/vectors/generate-resolution.mjs
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/deploy/airgap/docker-compose.airgap.yml
critical
Database URL with Password found in emiliaprotocol-emilia-protocol-6f4735c/.github/workflows/mobile-apps.yml