Back to search
medium low high medium low
B
76 /100
io.github.kakarot-dev/deepmiro
Author kakarot-dev
Scanned 14d ago
Simulate hundreds of AI agents to predict how communities react to events and policies
Versions
0.1.2scoredfirst seen May 19, 2026
Trust breakdown
Tools 9
search_simulations annotations: verified low
Search past simulations by topic, project name, or simulation ID.
readOnlyHint true openWorldHint false destructiveHint false
upload_document annotations: verified low
Upload a document for use in simulations.
readOnlyHint false openWorldHint false destructiveHint false
simulation_status annotations: verified low
Check the progress of a running or completed simulation. Long-polls by default
readOnlyHint true openWorldHint false destructiveHint false
interview_agent annotations: verified low
Chat with a specific simulated agent to understand their perspective,
readOnlyHint true openWorldHint true destructiveHint false
create_simulation annotations: verified low
Run a swarm prediction — graph build, persona generation, multi-agent simulation, report.\n\n
readOnlyHint false openWorldHint true destructiveHint false
get_report annotations: verified low
Generate and retrieve the prediction report for a completed simulation.
readOnlyHint false openWorldHint true destructiveHint false
list_simulations annotations: verified low
List past simulation runs with their status and metadata.
readOnlyHint true openWorldHint false destructiveHint false
simulation_data annotations: verified low
Access simulation data: agent profiles, configuration, action logs,
readOnlyHint true openWorldHint false destructiveHint false
cancel_simulation annotations: verified low
Stop a running simulation. SIGTERMs the subprocess immediately and marks
readOnlyHint false openWorldHint true destructiveHint true
Permissions 5
network Server uses network capabilities via: requests, urllib filesystem Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib, shutil, tempfile shell Server uses shell capabilities via: child_process, execSync(), subprocess database Server uses database capabilities via: sqlite3 env_vars Server uses env_vars capabilities via: os.environ, process.env Scan Findings 204
info
Tool 'search_simulations' annotations are consistent
info
Tool 'upload_document' annotations are consistent
info
Tool 'simulation_status' annotations are consistent
info
Tool 'interview_agent' annotations are consistent
info
Tool 'create_simulation' annotations are consistent
info
Tool 'get_report' annotations are consistent
info
Tool 'list_simulations' annotations are consistent
info
Tool 'simulation_data' annotations are consistent
info
Tool 'cancel_simulation' annotations are consistent
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: axios@1.7.0 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-43fc-jf86-j433)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-4hjh-wcwx-xvwj)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-8hc4-vh64-cxmj)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-9fr6-4gfg-395g)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-j8rh-479h-cp32)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-jr5f-v2jv-69x6)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-vh66-26gq-q6x8)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.7.0 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-39q2-94rc-95cp)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-55q2-fjhq-7xh7)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-6688-9rhm-gjv2)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-76mc-f452-cxcm)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-c2j3-45gr-mqc4)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-c6gr-qvv4-5v3f)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cj63-jhhr-wcxv)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cjmm-f4jc-qw8r)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-cmwh-pvxp-8882)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-crv5-9vww-q3g8)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-gvmj-g25r-r7wr)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-h7mw-gpvr-xq4m)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-h8r8-wccr-v5f2)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-hpcv-96wg-7vj8)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-mrv2-3pqr-j5jr)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-r47g-fvhr-h676)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-rp9w-3fw7-7cwq)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v2wj-7wpq-c8vv)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v8jm-5vwx-cfxm)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-v9jr-rg53-9pgp)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-vhxf-7vqr-mrjg)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-vxr8-fq34-vvx9)
medium
Vulnerable dependency: dompurify@3.2.0 (GHSA-x4vx-rjvf-j5p4)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-253c-mchw-3w2r)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-38c4-r59v-3vqw)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-6v5v-wf23-fmfq)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-gfr2-rv44-r23c)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-r7fv-28h4-cvq7)
medium
Vulnerable dependency: markdown-it@14.1.0 (GHSA-vfgh-jcmw-g37q)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-3rrr-jr9j-h3q3)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: mermaid@11.15.0 (GHSA-rhh3-jpg6-66xh)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-587h-7wmj-h5pm)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-698v-4r3x-3vcv)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-9jrq-w75r-8gcw)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-r825-w8mm-5pxw)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-rq7h-c2jc-7f22)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-22jm-h49p-29qw)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-46jr-4wx8-v453)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6prh-2h8m-c8cw)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h)
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-rvq5-wwqv-78pq)
medium
Vulnerable dependency: form-data@4.0.5 (GHSA-hmw2-7cc7-3qxx)
medium
Vulnerable dependency: zod@3.25.0 (GHSA-mrhx-c7xc-m3w5)
medium
Vulnerable dependency: flask@3.0.0 (GHSA-68rp-wp8r-4726)
medium
Vulnerable dependency: flask@3.0.0 (PYSEC-2026-2151)
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270)
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: pydantic@2.0 (GHSA-mr82-8j83-vxmv)
medium
Vulnerable dependency: pydantic@2.0 (PYSEC-2026-1812)
medium
Vulnerable dependency: torch@2.2 (GHSA-3749-ghw9-m3mg)
medium
Vulnerable dependency: torch@2.2 (GHSA-53q9-r3pm-6pq6)
medium
Vulnerable dependency: torch@2.2 (GHSA-887c-mr87-cxwp)
medium
Vulnerable dependency: torch@2.2 (GHSA-c678-jfcj-6jmf)
medium
Vulnerable dependency: torch@2.2 (GHSA-f4hp-rmr7-r7v8)
medium
Vulnerable dependency: torch@2.2 (GHSA-qfhq-4f3w-5fph)
medium
Vulnerable dependency: torch@2.2 (GHSA-rrmf-rvhw-rf47)
medium
Vulnerable dependency: torch@2.2 (GHSA-vgrw-7cvw-pwgx)
medium
Vulnerable dependency: torch@2.2 (GHSA-x3gm-94wq-g975)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2024-259)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-191)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-198)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-203)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-204)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-205)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-206)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-207)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-208)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-209)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2025-41)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2026-139)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2026-1970)
medium
Vulnerable dependency: torch@2.2 (PYSEC-2026-2286)
medium
Vulnerable dependency: transformers@4.40 (GHSA-29pf-2h5f-8g72)
medium
Vulnerable dependency: transformers@4.40 (GHSA-37mw-44qp-f5jm)
medium
Vulnerable dependency: transformers@4.40 (GHSA-4w7r-h757-3r74)
medium
Vulnerable dependency: transformers@4.40 (GHSA-59p9-h35m-wg4g)
medium
Vulnerable dependency: transformers@4.40 (GHSA-69w3-r845-3855)
medium
Vulnerable dependency: transformers@4.40 (GHSA-6rvg-6v2m-4j46)
medium
Vulnerable dependency: transformers@4.40 (GHSA-9356-575x-2w9m)
medium
Vulnerable dependency: transformers@4.40 (GHSA-fgcw-684q-jj6r)
medium
Vulnerable dependency: transformers@4.40 (GHSA-fpwr-67px-3qhx)
medium
Vulnerable dependency: transformers@4.40 (GHSA-hxxf-235m-72v3)
medium
Vulnerable dependency: transformers@4.40 (GHSA-jjph-296x-mrcr)
medium
Vulnerable dependency: transformers@4.40 (GHSA-phhr-52qp-3mj4)
medium
Vulnerable dependency: transformers@4.40 (GHSA-q2wp-rjmx-x6x9)
medium
Vulnerable dependency: transformers@4.40 (GHSA-qq3j-4f4f-9583)
medium
Vulnerable dependency: transformers@4.40 (GHSA-qxrp-vhvm-j765)
medium
Vulnerable dependency: transformers@4.40 (GHSA-rcv9-qm8p-9p6j)
medium
Vulnerable dependency: transformers@4.40 (GHSA-wrfc-pvp9-mr9g)
medium
Vulnerable dependency: transformers@4.40 (GHSA-xrqw-3rrv-vx5w)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-227)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-228)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-229)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-211)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-212)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-213)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-214)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-215)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-216)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-217)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-218)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-40)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1977)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1980)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1981)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1982)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1983)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1984)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1985)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1986)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1987)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1988)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2288)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2289)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2290)
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-3929)
medium
High-entropy string (6.07 bits/char) in kakarot-dev-deepmiro-0a7c1c8/engine/app/services/report_agent.py:1
medium
High-entropy string (5.85 bits/char) in kakarot-dev-deepmiro-0a7c1c8/engine/app/services/simulation_config_generator.py:1
medium
High-entropy string (6.14 bits/char) in kakarot-dev-deepmiro-0a7c1c8/engine/app/services/graph_tools.py:1
medium
High-entropy string (5.84 bits/char) in kakarot-dev-deepmiro-0a7c1c8/engine/app/services/graph_tools.py:732
medium
High-entropy string (6.01 bits/char) in kakarot-dev-deepmiro-0a7c1c8/engine/app/services/oasis_profile_generator.py:1
info
package.json metadata
info
pyproject.toml metadata
info
Tool: search_simulations
info
Tool: upload_document
info
Tool: simulation_status
info
Tool: interview_agent
info
Tool: create_simulation
info
Tool: get_report
info
Tool: list_simulations
info
Tool: simulation_data
info
Tool: cancel_simulation
info
Transport: stdio
info
Required env vars (49)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 425 components
medium
No build provenance detected (SLSA L0)