← Back to search

OpenVibeCoding Read-only MCP

xiaojiou176-open Scanned 24d ago

Read-only MCP for OpenVibeCoding runs, workflows, proof, queue, replay, and incident reads.

MCP Registry ↗
? Not scanned yet

Versions

0.1.0a4latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 4

network medium
Server uses network capabilities via: fetch(), httpx, socket, urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, spawn(), subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv(), process.env

Scan Findings 96

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 64 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-markdown dependency_analyzer · 60%
medium
Vulnerable dependency: vite@8.0.8 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@8.0.8 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.4 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-55q2-fjhq-7xh7) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-76mc-f452-cxcm) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-c2j3-45gr-mqc4) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-cmwh-pvxp-8882) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-gvmj-g25r-r7wr) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-hpcv-96wg-7vj8) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-r47g-fvhr-h676) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-rp9w-3fw7-7cwq) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-vxr8-fq34-vvx9) dependency_analyzer · 95%
medium
Vulnerable dependency: dompurify@3.4.0 (GHSA-x4vx-rjvf-j5p4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-267c-6grr-h53f) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-26hh-7cqf-hhc6) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-36qx-fr4f-26g5) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-3g8h-86w9-wvmq) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-492v-c6pp-mqqv) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-8h8q-6873-q5fj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-c4j6-fc7j-m34r) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-ffhc-5mcf-pf4q) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-gx5p-jg67-6x7h) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-h64f-5h5j-jqjh) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-mg66-mrh9-m8jx) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-vfv6-92ff-j949) dependency_analyzer · 95%
medium
Vulnerable dependency: next@16.2.3 (GHSA-wfc6-r584-vfw7) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-g6cj-pr64-35w5) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3552) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@46.0.7 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (GHSA-8ppf-4f7h-5ppj) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (GHSA-hm4w-wwcw-mr6r) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (GHSA-m4p7-r5rc-7g4j) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (PYSEC-2026-3455) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (PYSEC-2026-3456) dependency_analyzer · 95%
medium
Vulnerable dependency: pyasn1@0.6.3 (PYSEC-2026-3457) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-993g-76c3-p5m4) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-fhv5-28vv-h8m8) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-jq35-7prp-9v3f) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-w7vc-732c-9m39) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (GHSA-xgmm-8j9v-c9wx) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-175) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-177) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-178) dependency_analyzer · 95%
medium
Vulnerable dependency: pyjwt@2.12.1 (PYSEC-2026-179) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-5rvq-cxj2-64vf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-6jv3-5f52-599m) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-pp6c-gr5w-3c5g) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-v9pg-7xvm-68hf) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (GHSA-vffw-93wf-4j4q) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3036) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3037) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3039) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3040) dependency_analyzer · 95%
medium
Vulnerable dependency: python-multipart@0.0.26 (PYSEC-2026-3041) dependency_analyzer · 95%
medium
High-entropy string (5.74 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/apps/desktop/src/pages/ChangeGatesPage.tsx:19 entropy_analyzer · 51%
medium
Hex string literal (>50 chars) in xiaojiou176-open-codeflow-c3f6c2c/apps/orchestrator/tests/test_validator_and_compiler.py:189 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xiaojiou176-open-codeflow-c3f6c2c/apps/orchestrator/tests/test_validator_and_compiler.py:198 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xiaojiou176-open-codeflow-c3f6c2c/apps/orchestrator/tests/test_validator_and_compiler.py:203 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xiaojiou176-open-codeflow-c3f6c2c/apps/orchestrator/tests/test_schema_validation.py:138 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in xiaojiou176-open-codeflow-c3f6c2c/apps/orchestrator/tests/test_schema_validation.py:143 entropy_analyzer · 70%
medium
High-entropy string (5.86 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/apps/dashboard/app/planner/page.tsx:95 entropy_analyzer · 52%
medium
High-entropy string (5.92 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/apps/dashboard/app/planner/page.tsx:115 entropy_analyzer · 53%
medium
High-entropy string (5.76 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/packages/frontend-shared/uiCopy.ts:2370 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/packages/frontend-shared/uiCopy.ts:3529 entropy_analyzer · 50%
medium
High-entropy string (5.76 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/packages/frontend-shared/uiCopy.js:1241 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in xiaojiou176-open-codeflow-c3f6c2c/packages/frontend-shared/uiCopy.js:2357 entropy_analyzer · 50%
info
package.json metadata manifest_parser · 100%
info
Required env vars (290) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 75 components sbom_generator · 100%
high
Generic API Key Assignment found in xiaojiou176-open-codeflow-c3f6c2c/scripts/audit_dashboard_surface.mjs secret_scanner · 75%
high
Generic API Key Assignment found in xiaojiou176-open-codeflow-c3f6c2c/scripts/audit_desktop_surface.mjs secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%