low Tool 'create_project' has no annotations annotation_checker · 100%
low Tool 'add_page' has no annotations annotation_checker · 100%
low Tool 'add_tab' has no annotations annotation_checker · 100%
low Tool 'list_pages' has no annotations annotation_checker · 100%
low Tool 'update_page' has no annotations annotation_checker · 100%
low Tool 'replace_page_text' has no annotations annotation_checker · 100%
low Tool 'read_api_spec' has no annotations annotation_checker · 100%
low Tool 'update_api_spec' has no annotations annotation_checker · 100%
low Tool 'migrate_docs' has no annotations annotation_checker · 100%
low Tool 'import_docs' has no annotations annotation_checker · 100%
low Tool 'search_docs' has no annotations annotation_checker · 100%
low Tool 'semantic_search' has no annotations annotation_checker · 100%
low Tool 'agent_readiness' has no annotations annotation_checker · 100%
low Tool 'read_page' has no annotations annotation_checker · 100%
low Tool 'get_context' has no annotations annotation_checker · 100%
low Tool 'lint_project' has no annotations annotation_checker · 100%
low Tool 'translate_docs' has no annotations annotation_checker · 100%
low Tool 'sync_from_repo' has no annotations annotation_checker · 100%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Excessive dependency count: 64 direct dependencies dependency_analyzer · 90%
medium Suspicious package name: react-dom dependency_analyzer · 60%
medium Suspicious package name: react-markdown dependency_analyzer · 60%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-2v8p-3f2j-5mp7) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-3rrr-jr9j-h3q3) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-6m6c-36f7-fhxh) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-6x64-9x62-f2gx) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-87f9-hvmw-gh4p) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-c4c3-pg64-4m4v) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-ghcm-xqfw-q4vr) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-rhh3-jpg6-66xh) dependency_analyzer · 95%
medium Vulnerable dependency: mermaid@11.12.3 (GHSA-xcj9-5m2h-648r) dependency_analyzer · 95%
medium Vulnerable dependency: yaml@2.6.0 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.49 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.49 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.49 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.4.49 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium Vulnerable dependency: tsup@8.0.0 (GHSA-3mv9-4h5g-vhg3) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.0.15 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.0.15 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: zod@3.0.0 (GHSA-m95q-7qp3-xv42) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.15.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.15.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.15.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium Vulnerable dependency: yaml@2.8.2 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium Buffer.from base64 in thallylabs-thally-4d512d4/src/lib/admin/settings.ts:156 entropy_analyzer · 75%
medium Buffer.from base64 in thallylabs-thally-4d512d4/src/app/api/brand/logo/route.ts:31 entropy_analyzer · 75%
medium Buffer.from base64 in thallylabs-thally-4d512d4/src/app/api/brand/favicon/route.ts:36 entropy_analyzer · 75%
medium Buffer.from base64 in thallylabs-thally-4d512d4/.github/scripts/compute-scaffold-release.mjs:62 entropy_analyzer · 75%
info package.json metadata manifest_parser · 100%
info Tool: create_project manifest_parser · 75%
info Tool: add_page manifest_parser · 75%
info Tool: add_tab manifest_parser · 75%
info Tool: list_pages manifest_parser · 75%
info Tool: update_page manifest_parser · 75%
info Tool: replace_page_text manifest_parser · 75%
info Tool: read_api_spec manifest_parser · 75%
info Tool: update_api_spec manifest_parser · 75%
info Tool: migrate_docs manifest_parser · 75%
info Tool: import_docs manifest_parser · 75%
info Tool: search_docs manifest_parser · 75%
info Tool: semantic_search manifest_parser · 75%
info Tool: agent_readiness manifest_parser · 75%
info Tool: read_page manifest_parser · 75%
info Tool: get_context manifest_parser · 75%
info Tool: lint_project manifest_parser · 75%
info Tool: translate_docs manifest_parser · 75%
info Tool: sync_from_repo manifest_parser · 75%
info Transport: streamable-http manifest_parser · 80%
info Required env vars (78) manifest_parser · 80%
high High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 80%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
info SBOM generated: 1303 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%