medium Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1617) dependency_analyzer · 95%
low Tool 'search_markets' has no annotations annotation_checker · 100%
low Tool 'get_market_details' has no annotations annotation_checker · 100%
low Tool 'get_portfolio' has no annotations annotation_checker · 100%
low Tool 'get_trending_markets' has no annotations annotation_checker · 100%
low Tool 'place_order' has no annotations annotation_checker · 100%
low Tool 'get_series_markets' has no annotations annotation_checker · 100%
medium OAuth implementation without PKCE auth_checker · 75%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Vulnerable dependency: mcp@1.2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-79v4-65xg-pq4g) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2024-225) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1284) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1285) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-2141) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-35) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3553) dependency_analyzer · 95%
medium Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3554) dependency_analyzer · 95%
info pyproject.toml metadata manifest_parser · 100%
info Tool: search_markets manifest_parser · 90%
info Tool: get_market_details manifest_parser · 90%
info Tool: get_portfolio manifest_parser · 90%
info Tool: get_trending_markets manifest_parser · 90%
info Tool: place_order manifest_parser · 90%
info Tool: get_series_markets manifest_parser · 90%
info Required env vars (4) manifest_parser · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 90%
low Permission: filesystem access detected permission_analyzer · 80%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
info No dependency files found for SBOM generation sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%