← Back to search

io.github.timbassler88/snapstate

timbassler88 Scanned 10h ago

Persistent state for AI agent workflows. Save, resume, and replay multi-step workflows.

MCP Registry ↗
? Not scanned yet

Versions

1.0.2latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: fetch(), httpx
filesystem low
Server uses filesystem capabilities via: fs sync ops, os
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 42

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@6.12.0 (GHSA-83w8-p2f5-377r) dependency_analyzer · 95%
medium
Vulnerable dependency: @fastify/static@6.12.0 (GHSA-8pvw-jcv7-9cmj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@4.28.1 (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@4.28.1 (GHSA-jx2c-rxcm-jvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@4.28.1 (GHSA-mrq3-vjjr-p77c) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@4.28.1 (GHSA-w2qp-rph6-63g4) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@10.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Buffer.from base64 in timbassler88-SnapState-b9c2c62/server/src/services/checkpoint-writer.js:80 entropy_analyzer · 75%
medium
Buffer.from base64 in timbassler88-SnapState-b9c2c62/server/src/services/checkpoint-writer.js:101 entropy_analyzer · 75%
medium
Buffer.from base64 in timbassler88-SnapState-b9c2c62/server/src/services/checkpoint-writer.js:199 entropy_analyzer · 75%
medium
Buffer.from base64 in timbassler88-SnapState-b9c2c62/server/src/services/resume-engine.js:8 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: sse manifest_parser · 90%
info
Required env vars (31) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 484 components sbom_generator · 100%
high
Generic API Key Assignment found in timbassler88-SnapState-b9c2c62/sdk/examples/mcp-agent.js secret_scanner · 75%
critical
Database URL with Password found in timbassler88-SnapState-b9c2c62/server/src/config.js secret_scanner · 85%
high
Hardcoded Password found in timbassler88-SnapState-b9c2c62/server/src/utils/errors.js secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%