← Back to search

Code Assistant

j0hanz Scanned 12d ago

Gemini-powered MCP server for code analysis.

B
82.5 / 100

Versions

0.9.2latest
first seen Jun 5, 2026
2.0.0
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

generate_diff
annotations: verified low

Generate a diff of the current branch working changes and cache it for all review tools. You MUST call this tool before calling any other review tool. Use "unstaged" for working-tree changes not yet staged, or "staged" for changes already added with git add.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
load_file
annotations: verified low

Cache a single file for analysis tools (refactor_code, ask_about_code, verify_logic). Overwrites previous cache. Path is relative to server working directory (e.g. src/index.ts) or absolute (e.g. /home/user/project/src/index.ts).

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 14

info
Tool 'generate_diff' annotations are consistent annotation_checker · 80%
info
Tool 'load_file' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: generate_diff manifest_parser · 85%
info
Tool: load_file manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'generate_diff': Directive language: 'you must' poisoning · 85%
info
SBOM generated: 355 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%