low Tool 'recall_memories' has no annotations annotation_checker · 100%
low Tool 'store_memory' has no annotations annotation_checker · 100%
low Tool 'get_memory_stats' has no annotations annotation_checker · 100%
low Tool 'find_clinamen' has no annotations annotation_checker · 100%
low Tool 'delete_memory' has no annotations annotation_checker · 100%
low Tool 'update_memory' has no annotations annotation_checker · 100%
low Tool 'list_memories' has no annotations annotation_checker · 100%
low Tool 'batch_store_memories' has no annotations annotation_checker · 100%
high Hardcoded OAuth client secret in sebbsssss-clude-cecf234/apps/server/src/routes/__tests__/marketplace-payb.integration.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in sebbsssss-clude-cecf234/apps/server/src/routes/__tests__/marketplace-payments.routes.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/stripe-rail.test.ts auth_checker · 95%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Excessive dependency count: 142 direct dependencies dependency_analyzer · 90%
medium Suspicious package name: react-dom dependency_analyzer · 60%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.26.0 (GHSA-22jm-h49p-29qw) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.26.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.26.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium Vulnerable dependency: esbuild@0.28.0 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.1.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: multer@2.1.1 (GHSA-3p4h-7m6x-2hcm) dependency_analyzer · 95%
medium Vulnerable dependency: multer@2.1.1 (GHSA-535w-7cp7-47q4) dependency_analyzer · 95%
medium Vulnerable dependency: multer@2.1.1 (GHSA-72gw-mp4g-v24j) dependency_analyzer · 95%
medium Vulnerable dependency: multer@2.1.1 (GHSA-qvfw-j98x-7q72) dependency_analyzer · 95%
medium Vulnerable dependency: multer@2.1.1 (GHSA-wc9g-mqfw-jrwm) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-22jm-h49p-29qw) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.27.1 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium Vulnerable dependency: compression@1.8.1 (GHSA-vc2v-76pw-4v95) dependency_analyzer · 95%
medium Vulnerable dependency: express-rate-limit@8.2.1 (GHSA-46wh-pxpv-q5gq) dependency_analyzer · 95%
medium Vulnerable dependency: file-type@16.5.4 (GHSA-5v7r-6r5c-r473) dependency_analyzer · 95%
medium Vulnerable dependency: sharp@0.34.5 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium Vulnerable dependency: sharp@0.34.5 (GHSA-rgj7-g3m4-5g8c) dependency_analyzer · 95%
medium Vulnerable dependency: sharp@0.34.5 (GHSA-wq5f-xc86-pv6w) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-698v-4r3x-3vcv) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-p9ff-h696-f583) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-v2wj-q39q-566r) dependency_analyzer · 95%
medium Vulnerable dependency: vite@7.3.1 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.1.2 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/memorypack/src/sign.ts:170 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/memorypack/src/sign.ts:171 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/memorypack/src/sign.ts:213 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/memorypack/src/cli.ts:145 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/memory-envelope.ts:45 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/memory-envelope.ts:89 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/memory-envelope.ts:93 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/encryption-keys.ts:22 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/encryption.ts:85 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/__tests__/memory-envelope.test.ts:37 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/__tests__/memory-envelope.test.ts:38 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/shared/src/core/__tests__/memory-envelope.test.ts:50 entropy_analyzer · 75%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:32 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:33 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:34 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:35 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:36 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:38 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:41 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:42 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:43 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:46 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:47 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:48 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/proof-verify.test.ts:51 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:22 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:23 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:24 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:25 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:26 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:30 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:31 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:32 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:33 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:34 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/packages/ui/src/pmp/__tests__/merkle-v2-parity.test.ts:38 entropy_analyzer · 70%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/brain/src/cli/verify.ts:82 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/brain/src/cli/snapshot.ts:128 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/packages/brain/src/memory/memory-encryption.ts:88 entropy_analyzer · 75%
medium High-entropy string (5.86 bits/char) in sebbsssss-clude-cecf234/apps/server/src/routes/wallet-auth.routes.ts:11 entropy_analyzer · 52%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/routes/pmp-artifacts.routes.ts:484 entropy_analyzer · 75%
medium High-entropy string (5.77 bits/char) in sebbsssss-clude-cecf234/apps/server/src/routes/__tests__/topup-routes.test.ts:117 entropy_analyzer · 51%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/routes/__tests__/chat-uploads.routes.test.ts:10 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/routes/__tests__/chat-uploads.routes.test.ts:11 entropy_analyzer · 70%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/solana-title-transfer.ts:100 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/solana-title-transfer.ts:159 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/grant-copy.ts:206 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/snapshot-pack-for-title.ts:227 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/snapshot-pack-for-title.ts:231 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/snapshot-pack-for-title-solana.ts:230 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/snapshot-pack-for-title-solana.ts:233 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/solana-title-sale.ts:284 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/title-saga.ts:447 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/pmp/encrypt-records-for-holder.ts:58 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/base-identity.test.ts:49 entropy_analyzer · 75%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/base-identity.test.ts:7 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/base-identity.test.ts:8 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/base-title-identity.test.ts:5 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/server/src/lib/payments/__tests__/title-saga.test.ts:309 entropy_analyzer · 70%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/pmp/__tests__/encrypt-records-for-holder.test.ts:123 entropy_analyzer · 75%
medium Buffer.from base64 in sebbsssss-clude-cecf234/apps/server/src/lib/pmp/__tests__/encrypt-records-for-holder.test.ts:221 entropy_analyzer · 75%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/dashboard/src/lib/__tests__/decrypt-pmp.test.ts:386 entropy_analyzer · 70%
medium Hex string literal (>50 chars) in sebbsssss-clude-cecf234/apps/dashboard/src/lib/__tests__/decrypt-pmp.test.ts:445 entropy_analyzer · 70%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:66 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:68 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:101 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:142 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:182 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:238 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:264 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:338 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:354 entropy_analyzer · 80%
high Long unicode escape chain in sebbsssss-clude-cecf234/misc/scripts/benchmark.ts:395 entropy_analyzer · 80%
info package.json metadata manifest_parser · 100%
info Tool: recall_memories manifest_parser · 70%
info Tool: store_memory manifest_parser · 70%
info Tool: get_memory_stats manifest_parser · 70%
info Tool: find_clinamen manifest_parser · 70%
info Tool: delete_memory manifest_parser · 70%
info Tool: update_memory manifest_parser · 70%
info Tool: list_memories manifest_parser · 70%
info Tool: batch_store_memories manifest_parser · 70%
info Transport: stdio manifest_parser · 90%
info Required env vars (164) manifest_parser · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 90%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
medium Permission: database access detected permission_analyzer · 90%
low Permission: env_vars access detected permission_analyzer · 90%
critical Tool poisoning in 'get_memory_stats': System prompt override attempt poisoning · 90%
info SBOM generated: 109 components sbom_generator · 100%
high Generic API Key Assignment found in sebbsssss-clude-cecf234/misc/scripts/longmemeval-experimental.ts secret_scanner · 75%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%