Back to search
? Not scanned yet

io.github.Whatsonyourmind/oraclaw

Author Whatsonyourmind
Scanned 25d ago

Decision intelligence MCP — 17 tools (optimize, simulate, predict, score, graph). Sub-25ms.

MCP Registry

Versions

1.0.1
first seen Jun 5, 2026
1.4.1
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 4

network Server uses network capabilities via: fetch(), httpx, requests
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, os, path
low
database Server uses database capabilities via: pg
medium
env_vars Server uses env_vars capabilities via: os.getenv(), process.env
low

Scan Findings 76

high
Hardcoded OAuth client secret in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/oracle/phase4.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 95 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-native dependency_analyzer · 60%
medium
Vulnerable dependency: next@16.2.6 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-39w2-rjm5-chcv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-4jqv-mc3x-m676) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-cjq9-62q9-8jv4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-f87g-xv8r-7p7x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-mcj8-r9mp-w47p) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.6 (GHSA-vcvr-r3jv-pc5j) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-3m5p-2c4r-xxw2) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-4mh8-r7rc-xpvc) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-667r-xxjv-c9mm) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-9q9j-q6p8-xq58) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-hwr6-493r-vm6h) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-p68q-wchp-6fh7) dependency_analyzer · 95%
medium
Vulnerable dependency: fastify@5.8.5 (GHSA-w2qp-rph6-63g4) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-f88m-g3jw-g9cj) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-rgj7-g3m4-5g8c) dependency_analyzer · 95%
medium
Vulnerable dependency: sharp@0.33.0 (GHSA-wq5f-xc86-pv6w) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.8 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/hooks/x402-payment.ts:63 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts:701 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts:712 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts:715 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/integrations/email.ts:720 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/documentProcessor.ts:833 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/index.ts:401 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/src/services/oracle/multimodal/imageProcessor.ts:1095 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/api/tests/oracle/phase4.test.ts:608 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/email.ts:522 entropy_analyzer · 75%
medium
Buffer.from base64 in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/email.ts:525 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (83) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/calendar oauth_scope_analyzer · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/gmail.modify oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1435 components sbom_generator · 100%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/.github/workflows/ci.yml secret_scanner · 85%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/infrastructure/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/docker/docker-compose.yml secret_scanner · 85%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/docker/docker-compose.dev.yml secret_scanner · 85%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/docker/docker-compose.prod.yml secret_scanner · 85%
critical
Database URL with Password found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/.github/workflows/ci.yml secret_scanner · 85%
high
Generic API Key Assignment found in Whatsonyourmind-oraclaw-2d8ea96/mission-control/apps/mobile/src/services/integrations/webhooks.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%