← Back to search

@opengsd/mcp-server

GitHub Actions Scanned 5d ago

Cloud MCP gateway for brokering remote MCP clients to local GSD runtimes

npm
D
52 / 100

Versions

1.11.0latest
Jul 12, 2026
1.10.0
Jul 11, 2026
1.9.0
Jul 8, 2026
1.8.1
Jul 6, 2026
1.8.0
Jul 6, 2026
+ show 6 moreshow less
1.7.0
Jul 6, 2026
1.6.0
Jul 5, 2026
1.5.0
Jul 2, 2026
1.4.0
Jul 1, 2026
1.3.0
Jun 21, 2026
1.2.0
Jun 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 95

read
annotations: none low

Read a file

echo_value
annotations: none low

Echo a string value

echo
annotations: none low

Echoes the message back

get_circle
annotations: none low

Returns a circle image for visualization

save_evidence
annotations: none low

Save evidence

todowrite
annotations: none low

Write a todo item

find
annotations: none low

Find files by pattern

my_custom_tool
annotations: none low

A custom tool

math_operation
annotations: none low

Perform basic arithmetic operations

calculate
annotations: none low

Evaluate mathematical expressions

ask_user_questions
annotations: none low

Ask questions

dedupe_tool
annotations: none low

Deduped tool

gsd_plan_slice
annotations: none low

Plan slice

gsd_plan_task
annotations: none low

Plan task

gsd_reassess_roadmap
annotations: none low

Reassess roadmap

gsd_uat_result_save
annotations: none low

Save UAT result

fake
annotations: none low

fake_tool
annotations: none low

Probe-visible tool

discover_tool
annotations: none low

Discover-visible tool

gsd_status
annotations: none low

Probe-visible workflow tool

echo_meta
annotations: none low

Echo request _meta

gsd-workflow
annotations: none low

hello
annotations: none low

A simple greeting tool

structured_output
annotations: none low

Return a final structured answer. Use this as your last action when the user asks for structured output or a machine-readable summary.

gsd_execute
annotations: none low

Start a GSD auto-mode session for a project directory. Returns a sessionId for tracking.

bare boolean model string command string projectDir string
gsd_result
annotations: none low

Get the result of a GSD session. Returns partial results if the session is still running.

sessionId string
gsd_cancel
annotations: none low

Cancel a running GSD session. Aborts the current operation and stops the process. Provide sessionId (from gsd_execute) or projectDir as a fallback for interactive/restarted sessions.

sessionId string projectDir string
gsd_cancel_by_project
annotations: none low

Cancel the active GSD session for a project directory. Use when sessionId is unknown (e.g. Hermes gateway /gsd cancel).

projectDir string
gsd_query
annotations: none low

Query GSD project state from the filesystem. By default returns STATE.md, PROJECT.md, requirements, and milestone listing. Pass `query` to narrow the response (accepted:

projectDir string
gsd_resolve_blocker
annotations: none low

Resolve a pending blocker in a GSD session by sending a response to the UI request.

response string sessionId string
secure_env_collect
annotations: none low

Collect environment variables securely via form input. Values are written directly to .env (or Vercel/Convex) and NEVER appear in tool output — only key names and applied/skipped status are returned. Use this instead of asking users to manually edit .env files or paste secrets into chat.

key string hint string projectDir string envFilePath string
gsd_progress
annotations: none low

Get structured project progress: active milestone/slice/task, phase, completion counts, blockers, and next action. No session required — reads directly from .gsd/ on disk.

projectDir string
gsd_roadmap
annotations: none low

Get the full project roadmap structure: milestones with their slices, tasks, status, risk, and dependencies. Optionally filter to a single milestone. No session required.

projectDir string milestoneId string
gsd_history
annotations: none low

Get execution history with cost, token usage, model, and duration per unit. Returns totals across all units. No session required.

limit number projectDir string
gsd_doctor
annotations: none low

Run a lightweight structural health check on the .gsd/ directory. Checks for missing files, status inconsistencies, and orphaned state. No session required.

scope string projectDir string
gsd_captures
annotations: none low

Get captured ideas and thoughts from CAPTURES.md with triage status. Filter by pending, actionable, or all. No session required.

projectDir string
gsd_knowledge
annotations: none low

Get the project knowledge base: rules, patterns, and lessons learned accumulated during development. No session required.

projectDir string
gsd_decision_save
annotations: none low

Record a project decision to the GSD database and regenerate DECISIONS.md.

gsd_save_decision
annotations: none low

Alias for gsd_decision_save. Record a project decision to the GSD database and regenerate DECISIONS.md.

gsd_decision_list
annotations: none low

List decisions from the GSD database. Returns canonical store (never stale). Use instead of parsing DECISIONS.md.

limit number scope string projectDir string milestoneId string includeSuperseded boolean
gsd_decision_get
annotations: none low

Fetch a single decision by ID from the GSD database. Returns the full row or error (not_found / db_unavailable).

id string projectDir string includeSuperseded boolean
gsd_requirement_update
annotations: none low

Update an existing requirement in the GSD database and regenerate REQUIREMENTS.md.

gsd_update_requirement
annotations: none low

Alias for gsd_requirement_update. Update an existing requirement in the GSD database and regenerate REQUIREMENTS.md.

gsd_requirement_save
annotations: none low

Record a new requirement to the GSD database and regenerate REQUIREMENTS.md.

gsd_save_requirement
annotations: none low

Alias for gsd_requirement_save. Record a new requirement to the GSD database and regenerate REQUIREMENTS.md.

gsd_requirement_list
annotations: none low

List requirements from the GSD database. Returns canonical store (never stale). Use instead of parsing REQUIREMENTS.md.

class string limit number status string projectDir string milestoneId string
gsd_requirement_get
annotations: none low

Fetch a single requirement by ID from the GSD database. Returns the full row or error (not_found / db_unavailable).

id string projectDir string
gsd_milestone_generate_id
annotations: none low

Generate the next milestone ID for a new GSD milestone.

gsd_generate_milestone_id
annotations: none low

Alias for gsd_milestone_generate_id. Generate the next milestone ID for a new GSD milestone.

gsd_plan_milestone
annotations: none low

Write milestone planning state to the GSD database and render ROADMAP.md from DB.

gsd_milestone_plan
annotations: none low

Alias for gsd_plan_milestone. Write milestone planning state to the GSD database and render ROADMAP.md from DB.

gsd_slice_plan
annotations: none low

Alias for gsd_plan_slice. Write slice/task planning state to the GSD database and render plan artifacts from DB.

gsd_task_plan
annotations: none low

Alias for gsd_plan_task. Write task planning state to the GSD database and render the slice PLAN from DB.

gsd_replan_slice
annotations: none low

Replan a slice after a blocker is discovered, preserving completed tasks and re-rendering PLAN.md + REPLAN.md.

gsd_slice_replan
annotations: none low

Alias for gsd_replan_slice. Replan a slice after a blocker is discovered.

gsd_replan_task
annotations: none low

Update one pending task

gsd_rework_brief_save
annotations: none low

Persist a structured task rework brief whose blocking findings gate gsd_task_complete.

gsd_slice_complete
annotations: none low

Commit evidence-backed Slice completion in one revision- and Authority-Epoch-fenced SQLite operation, then refresh readable projections; projection failure is reported as stale.

gsd_complete_slice
annotations: none low

Alias for gsd_slice_complete. Commit evidence-backed Slice completion in SQLite, then refresh readable projections.

gsd_skip_slice
annotations: none low

Cancel a Slice atomically in SQLite, preserve completed work, interrupt running Attempts, and grant a current Slice-scoped dependency Waiver before refreshing projections.

gsd_complete_milestone
annotations: none low

Commit validated Milestone completion atomically, then render its readable SUMMARY projection.

gsd_milestone_complete
annotations: none low

Alias for gsd_complete_milestone. Commit validated Milestone completion atomically, then render its readable SUMMARY projection.

gsd_validate_milestone
annotations: none low

Validate a milestone, persist validation results to the GSD database, and render VALIDATION.md.

gsd_milestone_validate
annotations: none low

Alias for gsd_validate_milestone. Validate a milestone and render VALIDATION.md.

gsd_prepare_milestone_subjective_uat
annotations: none low

Prepare a source-bound subjective Milestone UAT question with a recommendation for a real user decision.

gsd_answer_milestone_subjective_uat
annotations: none low

Record the user

gsd_roadmap_reassess
annotations: none low

Alias for gsd_reassess_roadmap. Reassess a roadmap after slice completion.

gsd_save_gate_result
annotations: none low

Save a quality gate result to the GSD database.

gsd_summary_save
annotations: none low

Save a GSD summary/research/context/assessment artifact to the database and disk. Omit milestone_id only for root-level PROJECT/PROJECT-DRAFT/REQUIREMENTS/REQUIREMENTS-DRAFT artifacts.

gsd_save_summary
annotations: none low

Alias for gsd_summary_save. Save a GSD summary/research/context/assessment artifact to the database and disk.

gsd_task_complete
annotations: none low

Record a Task execution result in SQLite; canonical Tasks advance to host verification or recovery, while legacy Tasks complete directly and refresh readable projections.

gsd_complete_task
annotations: none low

Alias for gsd_task_complete. Record a Task result and advance canonical host verification/recovery or legacy completion.

gsd_task_reopen
annotations: none low

Reset a completed task back to pending so it can be re-done.

gsd_reopen_task
annotations: none low

Alias for gsd_task_reopen. Reset a completed task back to pending so it can be re-done.

gsd_task_recovery_resume
annotations: none low

Authorize one new Task Attempt after the current durable abort cause has been repaired.

gsd_task_settle
annotations: none low

Operator tool: settle a Task

gsd_slice_reopen
annotations: none low

Reopen a terminal Slice and all Tasks atomically in SQLite while preserving immutable history, revoking cancellation Waivers, and blocking progressed downstream Slices.

gsd_reopen_slice
annotations: none low

Alias for gsd_slice_reopen. Reopen a terminal Slice and all Tasks atomically in SQLite while preserving immutable history and enforcing downstream guards.

gsd_milestone_reopen
annotations: none low

Reopen a terminal Milestone hierarchy atomically while preserving immutable history, then refresh readable projections. Pass keepCompleted=true to unlock the milestone without resetting completed slices/tasks or deleting their SUMMARYs.

gsd_reopen_milestone
annotations: none low

Alias for gsd_milestone_reopen. Reopen a terminal Milestone hierarchy atomically, then refresh readable projections. Pass keepCompleted=true to unlock without resetting completed work.

gsd_milestone_status
annotations: none low

Read the current status of a milestone and all its slices from the GSD database. Includes `dependsOn`, the persisted milestone dependencies.

gsd_checkpoint_db
annotations: none low

Flush the SQLite WAL into gsd.db so git add stages the current GSD database state.

gsd_journal_query
annotations: none low

Query the structured event journal for auto-mode iterations.

gsd_uat_exec
annotations: none low

Run one UAT-scoped bash/node/python check with milestone/slice/check metadata. Evidence persists under .gsd/exec with kind=uat_exec.

gsd_exec
annotations: none low

Run a short bash/node/python script in the project directory. Capped stdout/stderr and metadata persist under .gsd/exec; only a digest returns to MCP.

gsd_exec_search
annotations: none low

Search prior gsd_exec runs from .gsd/exec/*.meta.json without re-running them.

gsd_resume
annotations: none low

Read .gsd/last-snapshot.md so agents can re-orient after compaction or session resume.

gsd_capture_thought
annotations: none low

Record a durable project insight into the GSD memory store. Categories: architecture, convention, gotcha, preference, environment, pattern. Mirrors the in-process capture_thought tool for external MCP clients.

gsd_memory_query
annotations: none low

Search the GSD memory store by keyword. Returns ranked memories with id, category, content, confidence, scope, and tags. Mirrors the in-process memory_query tool for external MCP clients.

gsd_memory_graph
annotations: none low

Inspect the relationship graph between memories. mode=query walks edges from a given memoryId. mode=build is a placeholder reserved for future graph rebuilds. Distinct from gsd_graph (project knowledge graph) — see ADR-013.

lookup
annotations: none low

Look up a value

double_number
annotations: none low

Doubles a number and returns the result

get_circle_with_description
annotations: none low

Returns a red circle image with a short text description.

calculator
annotations: none low

Perform basic arithmetic operations

bash
annotations: none low

Run a shell command

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, requests
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, open(), os, path, pathlib, shutil
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync(), subprocess
database medium
Server uses database capabilities via: better-sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 274

low
Tool 'gsd_result' has no annotations annotation_checker · 100%
low
Tool 'gsd_cancel' has no annotations annotation_checker · 100%
low
Tool 'gsd_cancel_by_project' has no annotations annotation_checker · 100%
low
Tool 'gsd_query' has no annotations annotation_checker · 100%
low
Tool 'ask_user_questions' has no annotations annotation_checker · 100%
low
Tool 'dedupe_tool' has no annotations annotation_checker · 100%
low
Tool 'gsd_plan_slice' has no annotations annotation_checker · 100%
low
Tool 'gsd_plan_task' has no annotations annotation_checker · 100%
low
Tool 'gsd_reassess_roadmap' has no annotations annotation_checker · 100%
low
Tool 'gsd_uat_result_save' has no annotations annotation_checker · 100%
low
Tool 'fake' has no annotations annotation_checker · 100%
low
Tool 'fake_tool' has no annotations annotation_checker · 100%
low
Tool 'discover_tool' has no annotations annotation_checker · 100%
low
Tool 'gsd_status' has no annotations annotation_checker · 100%
low
Tool 'echo_meta' has no annotations annotation_checker · 100%
low
Tool 'gsd-workflow' has no annotations annotation_checker · 100%
low
Tool 'hello' has no annotations annotation_checker · 100%
low
Tool 'structured_output' has no annotations annotation_checker · 100%
low
Tool 'gsd_execute' has no annotations annotation_checker · 100%
low
Tool 'gsd_resolve_blocker' has no annotations annotation_checker · 100%
low
Tool 'secure_env_collect' has no annotations annotation_checker · 100%
low
Tool 'gsd_progress' has no annotations annotation_checker · 100%
low
Tool 'gsd_roadmap' has no annotations annotation_checker · 100%
low
Tool 'gsd_history' has no annotations annotation_checker · 100%
low
Tool 'gsd_doctor' has no annotations annotation_checker · 100%
low
Tool 'gsd_captures' has no annotations annotation_checker · 100%
low
Tool 'gsd_knowledge' has no annotations annotation_checker · 100%
low
Tool 'gsd_decision_save' has no annotations annotation_checker · 100%
low
Tool 'gsd_save_decision' has no annotations annotation_checker · 100%
low
Tool 'gsd_decision_list' has no annotations annotation_checker · 100%
low
Tool 'gsd_decision_get' has no annotations annotation_checker · 100%
low
Tool 'gsd_requirement_update' has no annotations annotation_checker · 100%
low
Tool 'gsd_update_requirement' has no annotations annotation_checker · 100%
low
Tool 'gsd_requirement_save' has no annotations annotation_checker · 100%
low
Tool 'gsd_save_requirement' has no annotations annotation_checker · 100%
low
Tool 'gsd_requirement_list' has no annotations annotation_checker · 100%
low
Tool 'gsd_requirement_get' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_generate_id' has no annotations annotation_checker · 100%
low
Tool 'gsd_generate_milestone_id' has no annotations annotation_checker · 100%
low
Tool 'gsd_plan_milestone' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_plan' has no annotations annotation_checker · 100%
low
Tool 'gsd_slice_plan' has no annotations annotation_checker · 100%
low
Tool 'gsd_task_plan' has no annotations annotation_checker · 100%
low
Tool 'gsd_replan_slice' has no annotations annotation_checker · 100%
low
Tool 'gsd_slice_replan' has no annotations annotation_checker · 100%
low
Tool 'gsd_replan_task' has no annotations annotation_checker · 100%
low
Tool 'gsd_rework_brief_save' has no annotations annotation_checker · 100%
low
Tool 'gsd_slice_complete' has no annotations annotation_checker · 100%
low
Tool 'gsd_complete_slice' has no annotations annotation_checker · 100%
low
Tool 'gsd_skip_slice' has no annotations annotation_checker · 100%
low
Tool 'gsd_complete_milestone' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_complete' has no annotations annotation_checker · 100%
low
Tool 'gsd_validate_milestone' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_validate' has no annotations annotation_checker · 100%
low
Tool 'gsd_prepare_milestone_subjective_uat' has no annotations annotation_checker · 100%
low
Tool 'gsd_answer_milestone_subjective_uat' has no annotations annotation_checker · 100%
low
Tool 'gsd_roadmap_reassess' has no annotations annotation_checker · 100%
low
Tool 'gsd_save_gate_result' has no annotations annotation_checker · 100%
low
Tool 'gsd_summary_save' has no annotations annotation_checker · 100%
low
Tool 'gsd_save_summary' has no annotations annotation_checker · 100%
low
Tool 'gsd_task_complete' has no annotations annotation_checker · 100%
low
Tool 'gsd_complete_task' has no annotations annotation_checker · 100%
low
Tool 'gsd_task_reopen' has no annotations annotation_checker · 100%
low
Tool 'gsd_reopen_task' has no annotations annotation_checker · 100%
low
Tool 'gsd_task_recovery_resume' has no annotations annotation_checker · 100%
low
Tool 'gsd_task_settle' has no annotations annotation_checker · 100%
low
Tool 'gsd_slice_reopen' has no annotations annotation_checker · 100%
low
Tool 'gsd_reopen_slice' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_reopen' has no annotations annotation_checker · 100%
low
Tool 'gsd_reopen_milestone' has no annotations annotation_checker · 100%
low
Tool 'gsd_milestone_status' has no annotations annotation_checker · 100%
low
Tool 'gsd_checkpoint_db' has no annotations annotation_checker · 100%
low
Tool 'gsd_journal_query' has no annotations annotation_checker · 100%
low
Tool 'gsd_uat_exec' has no annotations annotation_checker · 100%
low
Tool 'gsd_exec' has no annotations annotation_checker · 100%
low
Tool 'gsd_exec_search' has no annotations annotation_checker · 100%
low
Tool 'gsd_resume' has no annotations annotation_checker · 100%
low
Tool 'gsd_capture_thought' has no annotations annotation_checker · 100%
low
Tool 'gsd_memory_query' has no annotations annotation_checker · 100%
low
Tool 'gsd_memory_graph' has no annotations annotation_checker · 100%
low
Tool 'lookup' has no annotations annotation_checker · 100%
low
Tool 'double_number' has no annotations annotation_checker · 100%
low
Tool 'get_circle_with_description' has no annotations annotation_checker · 100%
low
Tool 'calculator' has no annotations annotation_checker · 100%
low
Tool 'bash' has no annotations annotation_checker · 100%
low
Tool 'read' has no annotations annotation_checker · 100%
low
Tool 'echo_value' has no annotations annotation_checker · 100%
low
Tool 'echo' has no annotations annotation_checker · 100%
low
Tool 'get_circle' has no annotations annotation_checker · 100%
low
Tool 'save_evidence' has no annotations annotation_checker · 100%
low
Tool 'todowrite' has no annotations annotation_checker · 100%
low
Tool 'find' has no annotations annotation_checker · 100%
low
Tool 'my_custom_tool' has no annotations annotation_checker · 100%
low
Tool 'math_operation' has no annotations annotation_checker · 100%
low
Tool 'calculate' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in open-gsd-gsd-pi-e28218e/src/tests/mcp-client-oauth.test.ts auth_checker · 95%
high
Hardcoded API key in open-gsd-gsd-pi-e28218e/src/tests/secret-scan.test.ts auth_checker · 90%
high
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts auth_checker · 85%
high
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/openai-codex.ts auth_checker · 85%
high
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/kimi-coding.ts auth_checker · 85%
high
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/xai.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 172 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: ajv@8.17.1 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: diff@8.0.2 (GHSA-73rr-hh4g-fpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: extract-zip@2.0.1 (GHSA-jmr9-qjv8-65gv) dependency_analyzer · 95%
medium
Vulnerable dependency: picomatch@4.0.3 (GHSA-3v7f-55p6-f55p) dependency_analyzer · 95%
medium
Vulnerable dependency: picomatch@4.0.3 (GHSA-c2c7-rcm5-vvqj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-hm92-r4w5-c3mj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-vmh5-mc38-953g) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.26.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.5.10 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Vulnerable dependency: yaml@2.8.0 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/legacy-import-preview-interpretation.ts:334 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/mac-tools/index.ts:122 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-database-target.test.ts:166 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-planning.test.ts:256 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/schema-v27-v28-sequence.test.ts:254 entropy_analyzer · 70%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-gsd.test.ts:86 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-source.test.ts:77 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-supplemental.test.ts:281 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/src/resources/extensions/gsd/tests/legacy-import-preview-supplemental.test.ts:479 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in open-gsd-gsd-pi-e28218e/packages/gsd-agent-modes/src/modes/interactive/components/daxnuts.ts:14 entropy_analyzer · 70%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/block-images.test.ts:60 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/block-images.test.ts:101 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/tools.test.ts:174 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-processing.test.ts:26 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-processing.test.ts:42 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-processing.test.ts:44 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-processing.test.ts:101 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-processing.test.ts:113 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-resize-callers.test.ts:34 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/image-resize-callers.test.ts:46 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/test/export-html-behavior.test.ts:14 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/src/utils/image-convert.ts:24 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts:35 entropy_analyzer · 70%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/gsd-agent-core/src/blob-store.ts:136 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-tui/src/terminal-image.ts:312 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-tui/src/terminal-image.ts:333 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-tui/src/terminal-image.ts:376 entropy_analyzer · 75%
medium
Buffer.from base64 in open-gsd-gsd-pi-e28218e/packages/pi-tui/src/terminal-image.ts:398 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: ask_user_questions manifest_parser · 70%
info
Tool: dedupe_tool manifest_parser · 70%
info
Tool: gsd_plan_slice manifest_parser · 70%
info
Tool: gsd_plan_task manifest_parser · 70%
info
Tool: gsd_reassess_roadmap manifest_parser · 70%
info
Tool: gsd_uat_result_save manifest_parser · 70%
info
Tool: fake manifest_parser · 75%
info
Tool: fake_tool manifest_parser · 70%
info
Tool: discover_tool manifest_parser · 70%
info
Tool: gsd_status manifest_parser · 70%
info
Tool: echo_meta manifest_parser · 70%
info
Tool: gsd-workflow manifest_parser · 75%
info
Tool: hello manifest_parser · 75%
info
Tool: structured_output manifest_parser · 75%
info
Tool: gsd_execute manifest_parser · 70%
info
Tool: gsd_result manifest_parser · 70%
info
Tool: gsd_cancel manifest_parser · 70%
info
Tool: gsd_cancel_by_project manifest_parser · 70%
info
Tool: gsd_update_requirement manifest_parser · 70%
info
Tool: gsd_query manifest_parser · 70%
info
Tool: gsd_resolve_blocker manifest_parser · 70%
info
Tool: secure_env_collect manifest_parser · 70%
info
Tool: gsd_progress manifest_parser · 70%
info
Tool: gsd_roadmap manifest_parser · 70%
info
Tool: gsd_history manifest_parser · 70%
info
Tool: gsd_doctor manifest_parser · 70%
info
Tool: gsd_captures manifest_parser · 70%
info
Tool: gsd_knowledge manifest_parser · 70%
info
Tool: gsd_decision_save manifest_parser · 70%
info
Tool: gsd_save_decision manifest_parser · 70%
info
Tool: gsd_decision_list manifest_parser · 70%
info
Tool: gsd_decision_get manifest_parser · 70%
info
Tool: gsd_requirement_update manifest_parser · 70%
info
Tool: gsd_requirement_save manifest_parser · 70%
info
Tool: gsd_save_requirement manifest_parser · 70%
info
Tool: gsd_requirement_list manifest_parser · 70%
info
Tool: gsd_requirement_get manifest_parser · 70%
info
Tool: gsd_milestone_generate_id manifest_parser · 70%
info
Tool: gsd_generate_milestone_id manifest_parser · 70%
info
Tool: gsd_plan_milestone manifest_parser · 70%
info
Tool: gsd_milestone_plan manifest_parser · 70%
info
Tool: gsd_slice_plan manifest_parser · 70%
info
Tool: gsd_task_plan manifest_parser · 70%
info
Tool: gsd_replan_slice manifest_parser · 70%
info
Tool: gsd_slice_replan manifest_parser · 70%
info
Tool: gsd_replan_task manifest_parser · 70%
info
Tool: gsd_rework_brief_save manifest_parser · 70%
info
Tool: gsd_slice_complete manifest_parser · 70%
info
Tool: gsd_complete_slice manifest_parser · 70%
info
Tool: gsd_skip_slice manifest_parser · 70%
info
Tool: gsd_complete_milestone manifest_parser · 70%
info
Tool: gsd_milestone_complete manifest_parser · 70%
info
Tool: gsd_validate_milestone manifest_parser · 70%
info
Tool: gsd_milestone_validate manifest_parser · 70%
info
Tool: gsd_prepare_milestone_subjective_uat manifest_parser · 70%
info
Tool: gsd_answer_milestone_subjective_uat manifest_parser · 70%
info
Tool: gsd_roadmap_reassess manifest_parser · 70%
info
Tool: gsd_save_gate_result manifest_parser · 70%
info
Tool: gsd_summary_save manifest_parser · 70%
info
Tool: gsd_save_summary manifest_parser · 70%
info
Tool: gsd_task_complete manifest_parser · 70%
info
Tool: gsd_complete_task manifest_parser · 70%
info
Tool: gsd_task_reopen manifest_parser · 70%
info
Tool: gsd_reopen_task manifest_parser · 70%
info
Tool: gsd_task_recovery_resume manifest_parser · 70%
info
Tool: gsd_task_settle manifest_parser · 70%
info
Tool: gsd_slice_reopen manifest_parser · 70%
info
Tool: gsd_reopen_slice manifest_parser · 70%
info
Tool: gsd_milestone_reopen manifest_parser · 70%
info
Tool: gsd_reopen_milestone manifest_parser · 70%
info
Tool: gsd_milestone_status manifest_parser · 70%
info
Tool: gsd_checkpoint_db manifest_parser · 70%
info
Tool: gsd_journal_query manifest_parser · 70%
info
Tool: gsd_uat_exec manifest_parser · 70%
info
Tool: gsd_exec manifest_parser · 70%
info
Tool: gsd_exec_search manifest_parser · 70%
info
Tool: gsd_resume manifest_parser · 70%
info
Tool: gsd_capture_thought manifest_parser · 70%
info
Tool: gsd_memory_query manifest_parser · 70%
info
Tool: gsd_memory_graph manifest_parser · 70%
info
Tool: lookup manifest_parser · 90%
info
Tool: double_number manifest_parser · 90%
info
Tool: get_circle_with_description manifest_parser · 90%
info
Tool: calculator manifest_parser · 90%
info
Tool: bash manifest_parser · 90%
info
Tool: read manifest_parser · 90%
info
Tool: echo_value manifest_parser · 90%
info
Tool: echo manifest_parser · 90%
info
Tool: get_circle manifest_parser · 90%
info
Tool: save_evidence manifest_parser · 90%
info
Tool: todowrite manifest_parser · 90%
info
Tool: find manifest_parser · 90%
info
Tool: my_custom_tool manifest_parser · 90%
info
Tool: math_operation manifest_parser · 90%
info
Tool: calculate manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (398) manifest_parser · 80%
medium
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/examples/extensions/custom-provider-gitlab-duo/index.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/openai-codex.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/kimi-coding.ts oauth_scope_analyzer · 80%
medium
Hardcoded OAuth client ID in open-gsd-gsd-pi-e28218e/packages/pi-ai/src/utils/oauth/xai.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 162 components sbom_generator · 100%
high
Generic API Key Assignment found in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/docs/extensions.md secret_scanner · 75%
high
Generic API Key Assignment found in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/docs/custom-provider.md secret_scanner · 75%
high
Generic API Key Assignment found in open-gsd-gsd-pi-e28218e/packages/pi-coding-agent/examples/extensions/custom-provider-anthropic/index.ts secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%