← Back to search

io.github.Rumblingb/agent-audit-mcp

Rumblingb Scanned 1d ago

Immutable audit trail for agent-to-agent interactions

C
74.5 / 100

Versions

1.0.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

audit_log
annotations: none low

agent_id str severity str event_type str details_json str related_agent_id str
audit_get_event
annotations: none low

event_id str
audit_search
annotations: none low

to_date str agent_id str severity str from_date str event_type str max_results int
audit_get_agent_history
annotations: none low

agent_id str max_events int
audit_verify_chain
annotations: none low

to_event_id str from_event_id str
audit_stats
annotations: none low

Permissions 3

filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, open(), path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 30

low
Tool 'audit_stats' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
low
Tool 'audit_log' has no annotations annotation_checker · 100%
low
Tool 'audit_get_event' has no annotations annotation_checker · 100%
low
Tool 'audit_search' has no annotations annotation_checker · 100%
low
Tool 'audit_get_agent_history' has no annotations annotation_checker · 100%
low
Tool 'audit_verify_chain' has no annotations annotation_checker · 100%
info
Tool: audit_log manifest_parser · 90%
info
Tool: audit_get_event manifest_parser · 90%
info
Tool: audit_search manifest_parser · 90%
info
Tool: audit_get_agent_history manifest_parser · 90%
info
Tool: audit_verify_chain manifest_parser · 90%
info
Tool: audit_stats manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%