← Back to search

io.github.kubeshop/testkube-mcp

kubeshop Scanned 5d ago

MCP server for Testkube - Manage test workflows, executions, and artifacts via AI assistants

B
79.8 / 100

Versions

1.0.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

get_workflow_schema
annotations: none low

get_execution_schema
annotations: none low

list_labels
annotations: none low

list_resource_groups
annotations: none low

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 152

low
Tool 'get_workflow_schema' has no annotations annotation_checker · 100%
low
Tool 'get_execution_schema' has no annotations annotation_checker · 100%
low
Tool 'list_labels' has no annotations annotation_checker · 100%
low
Tool 'list_resource_groups' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 441 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: pytest@8.4.1 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.4.1 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.3.3 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.3.3 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/chrismellard/docker-credential-acr-env@0.0.0-20230304212654-82a0ddb27589 (GO-2026-6225) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GHSA-pxq6-2prw-chj9) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GHSA-rg2x-37c3-w2rh) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GHSA-vp62-88p7-qqf5) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GHSA-x86f-5xw2-fm2r) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GO-2026-4883) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GO-2026-4887) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GO-2026-5617) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GO-2026-5668) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/docker/docker@28.5.2+incompatible (GO-2026-5746) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.57.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.84.0 (GHSA-2v4p-qf9q-27wj) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.84.0 (GO-2026-6443) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GHSA-4v7x-pqxf-cx7m) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GHSA-qxp5-gwg8-xv66) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GHSA-vvgc-356p-c3xw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2024-2687) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2024-3333) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2025-3503) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2025-3595) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-4440) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-4441) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.17.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.13.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.13.0 (GO-2026-5970) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-3f24-pcvm-5jqc) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-52jh-2xxh-pwh6) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-55h8-8g96-x4hj) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-8r68-gvr4-jh7j) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-9983-vrx2-fg9c) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-fcjp-h8cc-6879) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-fhg8-qxh5-7q3w) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-jxxm-27vp-c3m5) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-pq2q-rcw4-3hr6) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-pwx7-fx9r-hr4h) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-qrvq-68c2-7grw) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-v722-jcv5-w7mc) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-vprv-35vv-q339) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GHSA-x6g4-f6q3-fqvv) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2025-3600) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4533) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4827) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4828) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4829) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4830) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4831) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4832) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4833) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4834) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4835) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4836) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4837) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/nats-io/nats-server/v2@2.10.12 (GO-2026-4841) dependency_analyzer · 95%
medium
Vulnerable dependency: filippo.io/edwards25519@1.1.0 (GHSA-fw7p-63qq-7hpr) dependency_analyzer · 95%
medium
Vulnerable dependency: filippo.io/edwards25519@1.1.0 (GO-2026-4503) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/aws/aws-sdk-go@1.51.13 (GO-2022-0635) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/aws/aws-sdk-go@1.51.13 (GO-2022-0646) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/moby/spdystream@0.2.0 (GHSA-pc3f-x583-g7j2) dependency_analyzer · 95%
medium
Vulnerable dependency: github.com/moby/spdystream@0.2.0 (GO-2026-4958) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-45gg-vh54-h5m9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-5cgq-3rg8-m6cv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-78mq-xcr3-xm33) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-89gr-r52h-f8rx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-9m57-25v3-79x9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-f5wc-c3c7-36mc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-f6x5-jh6r-wrfv) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-hcg3-q754-cr77) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-j5w8-q4qc-rx2x) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-jppx-rxg9-jmrx) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-q4h4-gmj2-qvw2) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-qpw4-5x99-6vjp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-rm3j-f69w-wqmq) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-v778-237x-gjrc) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-vgwf-h737-ff37) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-w879-237q-wc7r) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GHSA-x527-x647-q7gg) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2024-3321) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2025-3487) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2025-4116) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2025-4134) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2025-4135) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5005) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5006) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5013) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5014) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5015) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5016) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5017) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5018) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5019) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5020) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5021) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5023) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5033) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-5932) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-6303) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-6354) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/crypto@0.21.0 (GO-2026-6355) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GHSA-4v7x-pqxf-cx7m) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GHSA-qxp5-gwg8-xv66) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GHSA-vvgc-356p-c3xw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2024-2687) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2024-3333) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2025-3503) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2025-3595) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-4440) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-4441) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.22.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/oauth2@0.18.0 (GHSA-6v2p-p543-phr9) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/oauth2@0.18.0 (GO-2025-3488) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.18.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.14.0 (GO-2026-5970) dependency_analyzer · 95%
medium
High-entropy string (5.70 bits/char) in kubeshop-testkube-358c2f3/pkg/rand/string.go:5 entropy_analyzer · 50%
info
package.json metadata manifest_parser · 100%
info
Tool: get_workflow_schema manifest_parser · 85%
info
Tool: get_execution_schema manifest_parser · 85%
info
Tool: list_labels manifest_parser · 85%
info
Tool: list_resource_groups manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (81) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1315 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%