← Back to search

@sofagent/mcp

kongfangxun Scanned 4h ago

sofagent MCP Server — 暴露审计能力给 MCP Client（JSON-RPC 2.0 over stdio）

npm
? Not scanned yet

Versions

1.2.3latest
Jul 30, 2026
1.2.2
Jul 29, 2026
1.2.1
Jul 28, 2026
1.2.0
Jul 26, 2026
1.1.9
Jul 22, 2026
+ show 22 moreshow less
1.1.8
Jul 21, 2026
1.1.7
Jul 20, 2026
1.1.6
Jul 19, 2026
1.1.5
Jul 19, 2026
1.1.4
Jul 18, 2026
1.1.3
Jul 18, 2026
1.1.0
Jul 14, 2026
1.0.9
Jul 14, 2026
1.0.8
Jul 13, 2026
1.0.7
Jul 13, 2026
1.0.6
Jul 12, 2026
1.0.5
Jul 12, 2026
1.0.4
Jul 11, 2026
1.0.3
Jul 11, 2026
1.0.2
Jul 11, 2026
1.0.1
Jul 10, 2026
1.0.0
Jul 10, 2026
0.99.9
Jul 7, 2026
0.99.8
Jul 4, 2026
0.99.7
Jul 4, 2026
0.99.6
Jul 4, 2026
0.99.4
Jul 3, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, https, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path
shell high
Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
database medium
Server uses database capabilities via: mysql, pg
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 188

high
Hardcoded API key in KongFangXun-sofagent-daf102d/engine/rules/src/ast/__tests__/ast-engine.test.ts auth_checker · 90%
high
Hardcoded API key in KongFangXun-sofagent-daf102d/engine/core/src/__tests__/isomorphic-git-sanitize.test.ts auth_checker · 90%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 87 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-2gqq-gqf2-x968) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-2jfj-6hjv-fm6j) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-3wwx-pv8p-q78v) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-3xpg-4rpp-hhhm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-8436-99hf-9mmv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-pmjh-fq2x-6v4x) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-r53p-7pc4-xj5r) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-rfgv-xxqx-mfg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-rx4f-c7p8-82vq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-vp8m-p9jh-q5pm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@8.10.0 (GHSA-w293-vg96-wgc3) dependency_analyzer · 95%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/playbook/acceptance-node-probes.js:1160 entropy_analyzer · 50%
medium
High-entropy string (5.81 bits/char) in KongFangXun-sofagent-daf102d/tools/report/evolution-report.mjs:93 entropy_analyzer · 52%
medium
High-entropy string (6.10 bits/char) in KongFangXun-sofagent-daf102d/tools/check/doc-score.mjs:895 entropy_analyzer · 56%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-sdk-waiver-progress.mjs:45 entropy_analyzer · 50%
medium
High-entropy string (6.31 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-paired-records.mjs:142 entropy_analyzer · 59%
medium
High-entropy string (5.89 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-paired-records.mjs:155 entropy_analyzer · 53%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-cross-package-relative.mjs:238 entropy_analyzer · 50%
medium
High-entropy string (5.85 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-cross-package-relative.mjs:251 entropy_analyzer · 52%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/tools/check/doc-postcheck.mjs:123 entropy_analyzer · 51%
medium
High-entropy string (5.82 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-silent-catch.mjs:109 entropy_analyzer · 52%
medium
High-entropy string (5.89 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-silent-catch.mjs:400 entropy_analyzer · 53%
medium
High-entropy string (5.96 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-forms.mjs:409 entropy_analyzer · 54%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-forms.mjs:411 entropy_analyzer · 51%
medium
High-entropy string (5.92 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-forms.mjs:412 entropy_analyzer · 53%
medium
High-entropy string (6.59 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-forms.mjs:868 entropy_analyzer · 63%
medium
High-entropy string (6.35 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-forms.mjs:1037 entropy_analyzer · 60%
medium
High-entropy string (6.08 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-loadchain-config.mjs:44 entropy_analyzer · 56%
medium
High-entropy string (6.09 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-loadchain-config.mjs:62 entropy_analyzer · 56%
medium
High-entropy string (6.38 bits/char) in KongFangXun-sofagent-daf102d/tools/check/check-anchors.mjs:948 entropy_analyzer · 60%
high
Long unicode escape chain in KongFangXun-sofagent-daf102d/tools/check/check-anchors.mjs:179 entropy_analyzer · 80%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-plugin-manifests.mjs:67 entropy_analyzer · 51%
medium
High-entropy string (5.94 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-fresh-eyes-draft.mjs:122 entropy_analyzer · 54%
medium
High-entropy string (5.97 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-fresh-eyes-draft.mjs:189 entropy_analyzer · 54%
medium
High-entropy string (6.76 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-api-tools.mjs:16 entropy_analyzer · 66%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-api-tools.mjs:136 entropy_analyzer · 51%
medium
High-entropy string (6.22 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-perspective-prompts.mjs:119 entropy_analyzer · 58%
medium
High-entropy string (6.55 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-perspective-prompts.mjs:130 entropy_analyzer · 63%
medium
High-entropy string (6.24 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-perspective-prompts.mjs:140 entropy_analyzer · 58%
medium
High-entropy string (6.15 bits/char) in KongFangXun-sofagent-daf102d/tools/gen/gen-perspective-prompts.mjs:149 entropy_analyzer · 57%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/tools/verify/verify-chain.mjs:352 entropy_analyzer · 50%
medium
High-entropy string (5.93 bits/char) in KongFangXun-sofagent-daf102d/tools/check/lib/reflow-walls.mjs:55 entropy_analyzer · 53%
medium
High-entropy string (5.85 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/audit-middleware.mjs:64 entropy_analyzer · 52%
medium
High-entropy string (5.94 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/progress-middleware.mjs:114 entropy_analyzer · 54%
medium
High-entropy string (5.82 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/tool-output-budget.mjs:126 entropy_analyzer · 52%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/fresh-eyes-driver.test.mjs:556 entropy_analyzer · 50%
medium
High-entropy string (5.80 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/release-gate-driver.mjs:993 entropy_analyzer · 51%
medium
High-entropy string (5.77 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/release-gate-driver.mjs:2202 entropy_analyzer · 51%
medium
High-entropy string (5.74 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/release-gate-driver.mjs:2543 entropy_analyzer · 51%
medium
High-entropy string (5.96 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/fresh-eyes-driver.mjs:744 entropy_analyzer · 54%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/fresh-eyes-driver.mjs:825 entropy_analyzer · 50%
medium
High-entropy string (6.08 bits/char) in KongFangXun-sofagent-daf102d/FORGE/src/fresh-eyes-driver.mjs:1392 entropy_analyzer · 56%
medium
High-entropy string (5.82 bits/char) in KongFangXun-sofagent-daf102d/engine/rules/src/ast/rules/asi04-sbom.ts:146 entropy_analyzer · 52%
medium
High-entropy string (6.05 bits/char) in KongFangXun-sofagent-daf102d/engine/evolve/src/evolve-integration.ts:24 entropy_analyzer · 55%
medium
High-entropy string (5.72 bits/char) in KongFangXun-sofagent-daf102d/engine/evolve/src/evolve-integration.ts:71 entropy_analyzer · 50%
medium
High-entropy string (5.83 bits/char) in KongFangXun-sofagent-daf102d/engine/evolve/src/evolve-integration.ts:174 entropy_analyzer · 52%
medium
High-entropy string (6.07 bits/char) in KongFangXun-sofagent-daf102d/engine/evolve/src/native-gate.ts:119 entropy_analyzer · 55%
medium
High-entropy string (5.75 bits/char) in KongFangXun-sofagent-daf102d/engine/evolve/src/validator-health.ts:738 entropy_analyzer · 51%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/weights-manifest.ts:76 entropy_analyzer · 50%
medium
High-entropy string (6.62 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/builtin-agents.ts:280 entropy_analyzer · 64%
medium
High-entropy string (5.72 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/path-guard.ts:125 entropy_analyzer · 50%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/cli.ts:190 entropy_analyzer · 50%
medium
High-entropy string (6.15 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/model-registry.ts:452 entropy_analyzer · 57%
medium
High-entropy string (5.74 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/exec/skill-snapshot.ts:156 entropy_analyzer · 51%
medium
High-entropy string (5.95 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/gateway/gateway-audit.ts:45 entropy_analyzer · 54%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/router/decision-channel.ts:41 entropy_analyzer · 51%
medium
High-entropy string (6.20 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/loop-agent/fix-applier.ts:121 entropy_analyzer · 58%
medium
High-entropy string (5.74 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/loop/llm-model-resolver.ts:85 entropy_analyzer · 51%
medium
High-entropy string (6.11 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/refine-agent/image-meta.ts:121 entropy_analyzer · 56%
medium
High-entropy string (6.10 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/compat/plugin-mount-probe.ts:266 entropy_analyzer · 56%
medium
High-entropy string (5.89 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/events/types.ts:43 entropy_analyzer · 53%
medium
High-entropy string (5.77 bits/char) in KongFangXun-sofagent-daf102d/engine/orchestrator/src/__tests__/credential-vault.test.ts:31 entropy_analyzer · 51%
medium
High-entropy string (6.04 bits/char) in KongFangXun-sofagent-daf102d/engine/train/src/sorting-gate.ts:74 entropy_analyzer · 55%
medium
High-entropy string (6.17 bits/char) in KongFangXun-sofagent-daf102d/engine/train/src/sorting-gate.ts:146 entropy_analyzer · 57%
medium
High-entropy string (5.94 bits/char) in KongFangXun-sofagent-daf102d/engine/train/src/train-compliance.ts:197 entropy_analyzer · 54%
medium
High-entropy string (6.56 bits/char) in KongFangXun-sofagent-daf102d/engine/train/src/train-deliverable.ts:179 entropy_analyzer · 63%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/data-paths.ts:83 entropy_analyzer · 50%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/loadchain-schema.ts:404 entropy_analyzer · 51%
medium
High-entropy string (5.75 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/doctor.ts:827 entropy_analyzer · 51%
medium
High-entropy string (5.79 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/config-loader.ts:612 entropy_analyzer · 51%
medium
High-entropy string (5.84 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/config-template.ts:77 entropy_analyzer · 52%
medium
High-entropy string (5.95 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/audit-history.ts:79 entropy_analyzer · 54%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/age-wrapper.ts:85 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/age-wrapper.ts:86 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/age-wrapper.ts:87 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/key-manager.ts:110 entropy_analyzer · 75%
medium
High-entropy string (5.75 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/crypto/ecdh.ts:76 entropy_analyzer · 51%
medium
High-entropy string (5.82 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/verify/checks.ts:385 entropy_analyzer · 52%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/filesystem/isomorphic-git.ts:107 entropy_analyzer · 50%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/__tests__/chain-check-cipher.test.ts:127 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/core/src/__tests__/chain-check-cipher.test.ts:39 entropy_analyzer · 70%
medium
High-entropy string (5.70 bits/char) in KongFangXun-sofagent-daf102d/engine/core/src/crypto/__tests__/key-manager.test.ts:99 entropy_analyzer · 50%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/__tests__/key-manager.test.ts:83 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/__tests__/age-wrapper.test.ts:73 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/core/src/crypto/__tests__/age-wrapper.test.ts:78 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:450 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:465 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:523 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:554 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:578 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:595 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:609 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:627 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:650 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:651 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:704 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.test.ts:718 entropy_analyzer · 70%
medium
High-entropy string (6.01 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rule-loader.ts:92 entropy_analyzer · 55%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/decision-log.ts:163 entropy_analyzer · 50%
medium
High-entropy string (5.76 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/fix-suggestions.ts:26 entropy_analyzer · 51%
medium
High-entropy string (5.79 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/fix-suggestions.ts:45 entropy_analyzer · 51%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/mandate-store.ts:39 entropy_analyzer · 50%
medium
High-entropy string (6.06 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/audit-history.ts:57 entropy_analyzer · 55%
medium
High-entropy string (6.02 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/mandate-credential-reconcile.ts:243 entropy_analyzer · 55%
medium
High-entropy string (6.08 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/before-after-redaction.test.ts:11 entropy_analyzer · 56%
medium
High-entropy string (5.76 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/hook-install.ts:214 entropy_analyzer · 51%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/egress-audit.ts:167 entropy_analyzer · 51%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/decision-query.test.ts:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/decision-query.test.ts:152 entropy_analyzer · 70%
medium
High-entropy string (5.80 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/index.ts:89 entropy_analyzer · 51%
medium
High-entropy string (5.84 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/index.ts:111 entropy_analyzer · 52%
medium
High-entropy string (6.30 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-a2-secret-leak.ts:88 entropy_analyzer · 59%
medium
High-entropy string (5.79 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-a2-secret-leak.ts:493 entropy_analyzer · 51%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-a2.test.ts:454 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-a2.test.ts:487 entropy_analyzer · 75%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-e5-data-product.ts:17 entropy_analyzer · 50%
medium
High-entropy string (5.90 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-e5-data-product.ts:52 entropy_analyzer · 53%
medium
High-entropy string (6.08 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/rules/rule-e7-decision-quality-signal.ts:50 entropy_analyzer · 56%
medium
High-entropy string (5.81 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/cli/flag-table.ts:15 entropy_analyzer · 52%
medium
High-entropy string (5.77 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/__tests__/strictest-verdict-lock.test.ts:33 entropy_analyzer · 51%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/__tests__/hmac-key-lifecycle.test.ts:17 entropy_analyzer · 70%
medium
High-entropy string (5.91 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/__tests__/audit-scope.test.ts:46 entropy_analyzer · 53%
medium
Hex string literal (>50 chars) in KongFangXun-sofagent-daf102d/engine/audit/src/__tests__/cost-audit.test.ts:21 entropy_analyzer · 70%
medium
High-entropy string (5.81 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/__tests__/intent-channel.test.ts:677 entropy_analyzer · 52%
medium
High-entropy string (6.12 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/cli/demo-fixtures/seed.ts:72 entropy_analyzer · 56%
medium
High-entropy string (5.86 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/cli/demo-fixtures/seed.ts:135 entropy_analyzer · 52%
medium
High-entropy string (5.81 bits/char) in KongFangXun-sofagent-daf102d/engine/audit/src/cli/demo-fixtures/seed.ts:146 entropy_analyzer · 52%
medium
High-entropy string (6.00 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1317 entropy_analyzer · 55%
medium
High-entropy string (5.77 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1581 entropy_analyzer · 51%
medium
High-entropy string (5.83 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1657 entropy_analyzer · 52%
medium
High-entropy string (5.76 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1673 entropy_analyzer · 51%
medium
High-entropy string (6.18 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1691 entropy_analyzer · 57%
medium
High-entropy string (5.89 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1742 entropy_analyzer · 53%
medium
High-entropy string (6.14 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1792 entropy_analyzer · 57%
medium
High-entropy string (5.75 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1822 entropy_analyzer · 51%
medium
High-entropy string (5.90 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:1976 entropy_analyzer · 53%
medium
High-entropy string (5.92 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:2027 entropy_analyzer · 53%
medium
High-entropy string (6.00 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:2044 entropy_analyzer · 55%
medium
High-entropy string (6.00 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:2117 entropy_analyzer · 54%
medium
High-entropy string (6.45 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:2135 entropy_analyzer · 61%
medium
High-entropy string (5.94 bits/char) in KongFangXun-sofagent-daf102d/engine/mcp/src/tool-registry.ts:2150 entropy_analyzer · 54%
medium
High-entropy string (5.71 bits/char) in KongFangXun-sofagent-daf102d/engine/eval/src/eval-runner.ts:11 entropy_analyzer · 50%
medium
High-entropy string (5.87 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/fatigue.ts:250 entropy_analyzer · 53%
medium
High-entropy string (5.84 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/upload-wal.ts:150 entropy_analyzer · 52%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/daemon/src/upload-wal.ts:312 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/daemon/src/upload-wal.ts:313 entropy_analyzer · 75%
medium
Buffer.from base64 in KongFangXun-sofagent-daf102d/engine/daemon/src/upload-wal.ts:314 entropy_analyzer · 75%
medium
High-entropy string (5.73 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/device-registry.ts:599 entropy_analyzer · 50%
medium
High-entropy string (5.77 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/notify.ts:119 entropy_analyzer · 51%
medium
High-entropy string (5.82 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/cron.ts:132 entropy_analyzer · 52%
medium
High-entropy string (5.99 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/dream-cycle/real-provider.ts:189 entropy_analyzer · 54%
medium
High-entropy string (5.72 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/dream-cycle/real-provider.ts:222 entropy_analyzer · 50%
medium
High-entropy string (5.70 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/dream-cycle/real-provider.ts:292 entropy_analyzer · 50%
medium
High-entropy string (5.75 bits/char) in KongFangXun-sofagent-daf102d/engine/daemon/src/inspectors/skill-staleness.ts:6 entropy_analyzer · 51%
medium
High-entropy string (5.72 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/cordis-plugin-sofagent-rollback/src/index.ts:62 entropy_analyzer · 50%
medium
High-entropy string (5.97 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/plugin-kit/src/index.ts:238 entropy_analyzer · 54%
medium
High-entropy string (5.89 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/cordis-plugin-sofagent-evolve/src/write-surface-boundary.ts:134 entropy_analyzer · 53%
medium
High-entropy string (5.72 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/cordis-plugin-sofagent-audit/src/index.ts:204 entropy_analyzer · 50%
medium
High-entropy string (5.94 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/cordis-plugin-sofagent-audit/src/index.ts:250 entropy_analyzer · 54%
medium
High-entropy string (5.78 bits/char) in KongFangXun-sofagent-daf102d/engine/dsh-plugins/cordis-plugin-sofagent-audit/src/index.ts:329 entropy_analyzer · 51%
info
package.json metadata manifest_parser · 100%
info
Required env vars (153) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 760 components sbom_generator · 100%
high
Generic API Key Assignment found in KongFangXun-sofagent-daf102d/docs/guides/loop-development.md secret_scanner · 75%
critical
AWS Secret Access Key found in KongFangXun-sofagent-daf102d/docs/changelog/releasing/07-tool-health.md secret_scanner · 90%
high
Hardcoded Password found in KongFangXun-sofagent-daf102d/engine/scripts/windows/verify.ps1 secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%