← Back to search

Kin

firelock-ai Scanned 5d ago

Start Kin's MCP server, the system of record for AI-written software, through an npm-friendly wrapper.

? Not scanned yet

Versions

0.3.6latest
Jul 26, 2026
0.3.5
Jul 26, 2026
0.3.4
Jul 24, 2026
0.3.3
Jul 24, 2026
0.3.1
Jul 23, 2026
+ show 23 moreshow less
0.2.28
Jul 20, 2026
0.2.24
Jul 15, 2026
0.2.23
Jul 14, 2026
0.2.21
Jul 13, 2026
0.2.20
Jul 13, 2026
0.2.19
Jul 13, 2026
0.2.18
Jul 12, 2026
0.2.16
Jul 11, 2026
0.2.15
Jul 8, 2026
0.2.14
Jul 8, 2026
0.2.13
Jul 7, 2026
0.2.12
Jul 6, 2026
0.2.11
Jul 6, 2026
0.2.10
Jul 6, 2026
0.2.9
Jul 4, 2026
0.2.8
Jul 4, 2026
0.2.7
Jul 3, 2026
0.2.6
Jul 2, 2026
0.2.4
Jun 25, 2026
0.2.3
Jun 25, 2026
0.2.2
Jun 24, 2026
0.2.1
Jun 16, 2026
0.2.0
Jun 16, 2026
0.5.28latest
Aug 14, 2026

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 26

info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:82 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:83 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:99 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:162 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:203 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:222 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:715 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:719 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:723 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:727 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:731 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:735 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:739 entropy_analyzer · 70%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/scripts/verify-npm-attestation.mjs:11 entropy_analyzer · 75%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/scripts/verify-npm-attestation.mjs:17 entropy_analyzer · 75%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/packages/kin-mcp/test/index.test.js:94 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Required env vars (43) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%