← Back to search Server uses filesystem capabilities via: fs, fs sync ops Server uses shell capabilities via: child_process, spawn() Server uses env_vars capabilities via: process.env
io.github.michielinksee/bantou
AI bookkeeping agent for Japanese accountants — auto-classifies freee/Yayoi/MF/TKC transactions.
? Not scanned yet
Versions
0.2.2latestfirst seen Jul 2, 2026
Tools 0
No tools indexed yet.
Permissions 3
filesystem low shell high env_vars low Scan Findings 54
medium
Vulnerable dependency: next@15.0.0 (GHSA-9g9p-9gw9-jx7f)
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: next@15.0.0 (GHSA-2xp9-vwfh-vxw4)
medium
Vulnerable dependency: next@15.0.0 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@15.0.0 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@15.0.0 (GHSA-3h52-269p-cp9r)
medium
Vulnerable dependency: next@15.0.0 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@15.0.0 (GHSA-4342-x723-ch2f)
medium
Vulnerable dependency: next@15.0.0 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@15.0.0 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@15.0.0 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@15.0.0 (GHSA-7m27-7ghc-44w9)
medium
Vulnerable dependency: next@15.0.0 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@15.0.0 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@15.0.0 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@15.0.0 (GHSA-9qr9-h5gf-34mp)
medium
Vulnerable dependency: next@15.0.0 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@15.0.0 (GHSA-f82v-jwr5-mffw)
medium
Vulnerable dependency: next@15.0.0 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@15.0.0 (GHSA-g5qg-72qw-gw5v)
medium
Vulnerable dependency: next@15.0.0 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@15.0.0 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@15.0.0 (GHSA-h25m-26qc-wcjf)
medium
Vulnerable dependency: next@15.0.0 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@15.0.0 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@15.0.0 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@15.0.0 (GHSA-mwv6-3258-q52c)
medium
Vulnerable dependency: next@15.0.0 (GHSA-p293-qw3h-jr36)
medium
Vulnerable dependency: next@15.0.0 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@15.0.0 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@15.0.0 (GHSA-qpjv-v59x-3qc4)
medium
Vulnerable dependency: next@15.0.0 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@15.0.0 (GHSA-w37m-7fhw-fmv9)
medium
Vulnerable dependency: next@15.0.0 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: next@15.0.0 (GHSA-xv57-4mr9-wg8v)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-7fh5-64p2-3v2j)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.0 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vitest@2.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@2.0.0 (GHSA-9crc-q9x8-hgqq)
medium
High-entropy string (5.76 bits/char) in michielinksee-bantou-747b962/packages/cockpit-mcp/tests/test-csv-import.mjs:114
medium
High-entropy string (6.16 bits/char) in michielinksee-bantou-747b962/packages/cockpit-mcp/src/index.ts:256
info
package.json metadata
info
Transport: stdio
info
Required env vars (10)
info
Sandbox failed to start for output poisoning scan
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 659 components
medium
No build provenance detected (SLSA L0)