← Back to search

@totalreclaw/mcp-server

GitHub Actions Scanned 9d ago

End-to-end encrypted memory for AI agents — portable, yours forever. MCP server with XChaCha20-Poly1305 E2EE, semantic search, import/export, and on-chain storage

npm ↗
? Not scanned yet

Versions

3.4.0latest
Jul 9, 2026
3.3.0
May 24, 2026
3.3.0-rc.4
May 10, 2026
3.3.0-rc.3
May 8, 2026
3.3.0-rc.2
May 8, 2026
+ show 35 moreshow less
3.3.0-rc.1
May 8, 2026
3.2.1
Apr 26, 2026
3.2.0-rc.19
Apr 25, 2026
3.2.0-rc.18
Apr 25, 2026
3.2.0-rc.17
Apr 25, 2026
3.2.0
Apr 19, 2026
3.0.1
Apr 18, 2026
3.0.0
Apr 18, 2026
2.7.0
Apr 16, 2026
2.6.1
Apr 16, 2026
2.6.0
Apr 15, 2026
2.5.0
Apr 15, 2026
2.4.0
Apr 15, 2026
2.3.0
Apr 9, 2026
2.2.0
Apr 7, 2026
2.1.0
Apr 6, 2026
2.0.0
Apr 4, 2026
1.7.1
Apr 4, 2026
1.7.0
Apr 4, 2026
1.6.9
Apr 4, 2026
1.6.8
Apr 3, 2026
1.6.7
Apr 3, 2026
1.6.6
Apr 3, 2026
1.6.5
Apr 2, 2026
1.6.4
Apr 1, 2026
1.6.3
Mar 29, 2026
1.6.2
Mar 29, 2026
1.6.1
Mar 28, 2026
1.6.0
Mar 28, 2026
1.5.0
Mar 26, 2026
1.4.0
Mar 26, 2026
1.3.0
Mar 25, 2026
1.2.0
Mar 22, 2026
1.1.0
Mar 19, 2026
1.0.0
Mar 6, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: fetch(), http, httpx, requests, socket, urllib, websocket, ws
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, fs/promises, glob, open(), os, path, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: child_process, execSync(), spawnSync(), subprocess
database medium
Server uses database capabilities via: sqlalchemy
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 244

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 119 direct dependencies dependency_analyzer · 90%
medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Vulnerable dependency: playwright@1.49.0 (GHSA-7mvr-c777-76hp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.47 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.47 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.47 (GHSA-qx2v-qp2m-jg93) dependency_analyzer · 95%
medium
Vulnerable dependency: postcss@8.4.47 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-356w-63v5-8wf4) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-4r4m-qw57-chr8) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-4w7w-66w2-5vf9) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-859w-5945-r5v3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-93m4-6634-74q7) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-c27g-q93r-2cwf) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-fx2h-pf6j-xcff) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-g4jq-h2w9-997c) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-jqfw-vq24-v9c3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-v6wh-96g9-6wx3) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-vg6x-rcgg-rjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-x574-m823-4x7w) dependency_analyzer · 95%
medium
Vulnerable dependency: vite@5.4.8 (GHSA-xcj6-pq6g-qj4x) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@2.1.9 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.3 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.18.3 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-2pr8-phx7-x9h3) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-66ff-xgx4-vchm) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-685m-2w69-288q) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-75px-5xx7-5xc7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-f38q-mgvj-vph7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-fx83-v9x8-x52w) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-jggg-4jg4-v7c6) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-jvwf-75h9-cwgg) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-q6x5-8v7m-xcrf) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-wcpc-wj8m-hjx6) dependency_analyzer · 95%
medium
Vulnerable dependency: protobufjs@7.2.5 (GHSA-xq3m-2v4x-88gg) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.19.0 (GHSA-58qx-3vcg-4xpx) dependency_analyzer · 95%
medium
Vulnerable dependency: ws@8.19.0 (GHSA-96hv-2xvq-fx4p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-79v4-65xg-pq4g) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2024-225) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1284) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0.0 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.0.0 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@8.0.0 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: fastapi@0.109.0 (PYSEC-2024-38) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (GHSA-7gcm-g887-7qv7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (GHSA-8qvm-5x2c-j2w7) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (PYSEC-2026-1805) dependency_analyzer · 95%
medium
Vulnerable dependency: protobuf@4.25.0 (PYSEC-2026-1806) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.4.0 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.4.0 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-29pf-2h5f-8g72) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-37mw-44qp-f5jm) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-4w7r-h757-3r74) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-59p9-h35m-wg4g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-69w3-r845-3855) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-6rvg-6v2m-4j46) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-9356-575x-2w9m) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-fgcw-684q-jj6r) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-fpwr-67px-3qhx) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-hxxf-235m-72v3) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-jjph-296x-mrcr) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-phhr-52qp-3mj4) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-q2wp-rjmx-x6x9) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-qq3j-4f4f-9583) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-qxrp-vhvm-j765) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-rcv9-qm8p-9p6j) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (GHSA-wrfc-pvp9-mr9g) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-227) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-228) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2024-229) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-211) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-212) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-213) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-214) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-215) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-216) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-217) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-218) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2025-40) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1977) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1980) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1981) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1982) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1983) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1984) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1985) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1986) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1987) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-1988) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2288) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2289) dependency_analyzer · 95%
medium
Vulnerable dependency: transformers@4.40 (PYSEC-2026-2290) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-537c-gmf6-5ccf) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-6vqw-3v5j-54x4) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-79v4-65xg-pq4g) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-9v9h-cgj8-h64p) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-h4gh-qq45-vh27) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-jwv3-5hgf-82ww) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-m2h6-j472-rp4c) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-m959-cc7f-wv43) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (GHSA-r6ph-v2qm-q3c2) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2024-225) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-1284) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-1285) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-2141) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-35) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-3553) dependency_analyzer · 95%
medium
Vulnerable dependency: cryptography@42.0 (PYSEC-2026-3554) dependency_analyzer · 95%
medium
Vulnerable dependency: websockets@12.0,<14 (GHSA-8ch4-58qp-g3mp) dependency_analyzer · 95%
medium
Vulnerable dependency: websockets@12.0,<14 (PYSEC-2018-79) dependency_analyzer · 95%
medium
Vulnerable dependency: websockets@12.0,<14 (PYSEC-2021-95) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (GHSA-8867-vpm3-g98g) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (GHSA-p3h7-3c45-qj4v) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (GHSA-p86x-652p-6385) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (PYSEC-2012-8) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (PYSEC-2019-181) dependency_analyzer · 95%
medium
Vulnerable dependency: keyring@24; sys_platform == 'darwin' (PYSEC-2019-182) dependency_analyzer · 95%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/subgraph/tests/e2e-ombh-validation.ts:118 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/index.ts:654 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/pocv2-e2e-test.ts:141 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/pocv2-e2e-test.ts:162 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/cli/tr-cli.ts:140 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/cli/tr-cli.ts:226 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/cli/tr-cli.ts:677 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/cli/tr-cli.ts:700 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/memory/pin-batch-cross-impl-parity.test.ts:120 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/memory/pin-batch-cross-impl-parity.test.ts:121 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/memory/pin-batch-cross-impl-parity.test.ts:127 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/runtime/format-helpers.ts:254 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/crypto/vault-crypto.test.ts:136 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/crypto/vault-crypto.test.ts:137 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/crypto/vault-crypto.test.ts:138 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/crypto/vault-crypto.test.ts:139 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/skill/plugin/embedding/embedding-codec.ts:203 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/pairing/pair-crypto.test.ts:109 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/pairing/pair-crypto.test.ts:110 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/pairing/pair-crypto.test.ts:111 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/pairing/pair-crypto.test.ts:112 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/pairing/pair-crypto.test.ts:113 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/skill/plugin/digest/digest-injection.test.ts:690 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/scripts/gen-golden-pin.mjs:34 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/scripts/gen-golden-pin.mjs:71 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/app/e2e/delete-onchain.mjs:224 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/app/e2e/retype-setscope-onchain.mjs:393 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/app/e2e/pin-onchain.mjs:342 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:50 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:52 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:60 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:139 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:145 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:146 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:149 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:163 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:173 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:185 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:189 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/userop.golden.test.ts:193 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/api.test.ts:11 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/crypto.test.ts:22 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/crypto.test.ts:24 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/crypto.test.ts:35 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/claim.test.ts:262 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/auth/escrow.test.ts:31 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/auth/escrow.test.ts:32 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/app/src/lib/auth/escrow.test.ts:33 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/mcp/src/embedding-codec.ts:175 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/mcp/src/index.ts:1117 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/mcp/src/index.ts:1239 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/mcp/src/index.ts:1303 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/mcp/src/index.ts:1662 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/chain-config.test.ts:120 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/store-bundle-signing.test.ts:38 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/store-bundle-signing.test.ts:49 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/store-bundle-signing.test.ts:56 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/store-bundle-signing.test.ts:67 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/mcp/tests/store-bundle-signing.test.ts:84 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/client/tests/hot-cache.test.ts:12 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/client/tests/hot-cache.test.ts:61 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/client/tests/recovery-flow.test.ts:11 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/client/tests/recovery-flow.test.ts:229 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/client/tests/crypto.test.ts:147 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/client/tests/crypto.test.ts:177 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/client/tests/crypto.test.ts:205 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_claims_helper.py:268 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_claims_helper.py:502 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/python/tests/cross_client_e2e.py:177 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:59 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:65 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:110 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:116 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:122 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_session_key_signing.py:326 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_pin_batch_cross_impl_parity.py:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_pin_batch_cross_impl_parity.py:81 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/tests/test_pin_batch_cross_impl_parity.py:327 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/src/totalreclaw/userop.py:798 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/src/totalreclaw/userop.py:799 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/src/totalreclaw/userop.py:1092 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/python/src/totalreclaw/userop.py:1093 entropy_analyzer · 70%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/parity/nanoclaw-adapter.ts:130 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/parity/crypto-parity.test.ts:622 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/parity/plugin-adapter.ts:153 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/ts-helper.ts:79 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/ts-helper.ts:248 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/mcp-debrief-e2e.ts:150 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/mcp-debrief-e2e.ts:677 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/mcp-debrief-e2e.ts:991 entropy_analyzer · 75%
medium
Buffer.from base64 in p-diogo-totalreclaw-80a9d78/tests/e2e-debrief/mcp-debrief-e2e.ts:1007 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/server/tests/test_audit_logging.py:41 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/server/tests/test_audit_logging.py:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/server/tests/test_sql_injection.py:79 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/server/tests/test_sql_injection.py:80 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in p-diogo-totalreclaw-80a9d78/server/tests/test_sql_injection.py:92 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (113) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1462 components sbom_generator · 100%
critical
AWS Access Key ID found in p-diogo-totalreclaw-80a9d78/rust/totalreclaw-core/src/secrets.rs secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%