low Tool 'get_project_context' has no annotations annotation_checker · 100%
low Tool 'list_projects' has no annotations annotation_checker · 100%
low Tool 'list_sessions' has no annotations annotation_checker · 100%
low Tool 'search_conversations' has no annotations annotation_checker · 100%
low Tool 'get_session' has no annotations annotation_checker · 100%
low Tool 'get_session_summary' has no annotations annotation_checker · 100%
low Tool 'store_memory' has no annotations annotation_checker · 100%
medium Vulnerable dependency: axios@1.6.0 (GHSA-5c9x-8gcm-mpgx) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-62hf-57xw-28j9) dependency_analyzer · 95%
low Tool 'recall_memory' has no annotations annotation_checker · 100%
low Tool 'list_memories' has no annotations annotation_checker · 100%
low Tool 'delete_memory' has no annotations annotation_checker · 100%
medium OAuth implementation without PKCE auth_checker · 75%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Suspicious package name: react-dom dependency_analyzer · 60%
medium Suspicious package name: react-markdown dependency_analyzer · 60%
medium Vulnerable dependency: cross-spawn@7.0.3 (GHSA-3xgq-45jj-v275) dependency_analyzer · 95%
medium Vulnerable dependency: @fastify/static@6.12.0 (GHSA-83w8-p2f5-377r) dependency_analyzer · 95%
medium Vulnerable dependency: @fastify/static@6.12.0 (GHSA-8pvw-jcv7-9cmj) dependency_analyzer · 95%
medium Vulnerable dependency: fastify@4.24.3 (GHSA-444r-cwp2-x5xf) dependency_analyzer · 95%
medium Vulnerable dependency: fastify@4.24.3 (GHSA-jx2c-rxcm-jvmq) dependency_analyzer · 95%
medium Vulnerable dependency: fastify@4.24.3 (GHSA-mrq3-vjjr-p77c) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-35jp-ww65-95wh) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-3g43-6gmg-66jw) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-3p68-rc4w-qgx5) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-3w6x-2g7m-8v23) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-42h9-826w-cgv3) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-43fc-jf86-j433) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-445q-vr5w-6q77) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-4hjh-wcwx-xvwj) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-6chq-wfr3-2hj9) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-7q8q-rj6j-mhjq) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-898c-q2cr-xwhg) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-8hc4-vh64-cxmj) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-fvcv-3m26-pcqx) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-hfxv-24rg-xrqf) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-j5f8-grm9-p9fc) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-jr5f-v2jv-69x6) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-m7pr-hjqh-92cm) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-mmx7-hfxf-jppx) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-p92q-9vqr-4j8v) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-pf86-5x62-jrwf) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-pmv8-rq9r-6j72) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-pmwg-cvhr-8vh7) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-q8qp-cvcw-x6jj) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-vf2m-468p-8v99) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-w9j2-pvgh-6h63) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-xhjh-pmcv-23jw) dependency_analyzer · 95%
medium Vulnerable dependency: axios@1.6.0 (GHSA-xx6v-rp6x-q39c) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.31 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.31 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.31 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.31 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-64vr-g452-qvp3) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-8jhw-289h-jh2g) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-92r3-m2mg-pj97) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-9cwx-2883-4wfx) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-c24v-8rfc-w8vw) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium Vulnerable dependency: vite@4.5.0 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@0.34.6 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info package.json metadata manifest_parser · 100%
info Tool: get_project_context manifest_parser · 70%
info Tool: list_projects manifest_parser · 70%
info Tool: list_sessions manifest_parser · 70%
info Tool: search_conversations manifest_parser · 70%
info Tool: get_session manifest_parser · 70%
info Tool: get_session_summary manifest_parser · 70%
info Tool: store_memory manifest_parser · 70%
info Tool: recall_memory manifest_parser · 70%
info Tool: list_memories manifest_parser · 70%
info Tool: delete_memory manifest_parser · 70%
info Transport: stdio manifest_parser · 90%
info Required env vars (6) manifest_parser · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
info SBOM generated: 1046 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%