low Permission: filesystem access detected permission_analyzer · 90%
medium Permission: network access detected permission_analyzer · 70%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
info Required env vars (23) manifest_parser · 80%
info Transport: streamable-http manifest_parser · 80%
info Tool: query-docs manifest_parser · 85%
info Tool: resolve-library-id manifest_parser · 85%
info package.json metadata manifest_parser · 100%
medium Hex string literal (>50 chars) in upstash-context7-63a40c6/packages/mcp/src/lib/encryption.ts:5 entropy_analyzer · 70%
medium Vulnerable dependency: undici@7.0.0 (GHSA-vxpw-j846-p89q) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-pr7r-676h-xcf6) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-p88m-4jfj-68fv) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-g8m3-5g58-fq7m) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-35p6-xmwp-9g52) dependency_analyzer · 95%
low Tool 'resolve-library-id' has no annotations annotation_checker · 100%
info Tool 'query-docs' annotations are consistent annotation_checker · 80%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Vulnerable dependency: @earendil-works/pi-coding-agent@0.78.0 (GHSA-7v5m-pr3q-6453) dependency_analyzer · 95%
medium Vulnerable dependency: @earendil-works/pi-coding-agent@0.78.0 (GHSA-jfgx-wxx8-mp94) dependency_analyzer · 95%
medium Vulnerable dependency: @earendil-works/pi-coding-agent@0.78.0 (GHSA-mqxh-6gq7-558m) dependency_analyzer · 95%
medium Vulnerable dependency: @earendil-works/pi-coding-agent@0.78.0 (GHSA-r95r-rj6r-c39x) dependency_analyzer · 95%
medium Vulnerable dependency: undici@7.0.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%
critical Database URL with Password found in upstash-context7-63a40c6/docs/enterprise/deployment/scaling.mdx secret_scanner · 85%
high Generic API Key Assignment found in upstash-context7-63a40c6/packages/tools-ai-sdk/src/agents/context7.ts secret_scanner · 75%
info SBOM generated: 42 components sbom_generator · 100%
critical Tool poisoning in 'query-docs': Directive language: 'you must' poisoning · 85%
critical Tool poisoning in 'resolve-library-id': Directive language: 'you must' poisoning · 85%
low Permission: env_vars access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
medium Hex string literal (>50 chars) in packages/mcp/src/lib/encryption.ts:5 entropy_analyzer · 70%
info Tool: resolve-library-id manifest_parser · 85%
info Tool: query-docs manifest_parser · 85%
info Transport: stdio manifest_parser · 90%
info Required env vars (22) manifest_parser · 80%
info Tool 'resolve-library-id' annotations are consistent annotation_checker · 80%
info Tool 'query-docs' annotations are consistent annotation_checker · 80%
critical Tool poisoning in 'resolve-library-id': Directive language: 'you must' poisoning · 85%
critical Tool poisoning in 'query-docs': Directive language: 'you must' poisoning · 85%
medium Permission: network access detected permission_analyzer · 80%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-9qxr-qj54-h672) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-m4v8-wqvr-p9f7) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
high Generic API Key Assignment found in packages/tools-ai-sdk/src/agents/context7.ts secret_scanner · 75%
info package.json metadata manifest_parser · 100%
info SLSA Build Level 3 detected slsa_assessor · 85%
info Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info SBOM generated: 40 components sbom_generator · 100%
info MITRE ATLAS technique coverage summary atlas_annotator · 100%
info ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
info ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info MITRE ATLAS technique coverage summary atlas_annotator · 100%
info SBOM generated: 34 components sbom_generator · 100%
info Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info SLSA Build Level 3 detected slsa_assessor · 85%
medium Hex string literal (>50 chars) in packages/mcp/src/lib/encryption.ts:4 entropy_analyzer · 70%
high Generic API Key Assignment found in packages/tools-ai-sdk/src/agents/context7.ts secret_scanner · 75%
medium Vulnerable dependency: undici@6.6.3 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-m4v8-wqvr-p9f7) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-g9mf-h72j-4rw9) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-cxrh-j4jr-qwg3) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-c76h-2ccp-4975) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-9qxr-qj54-h672) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium Vulnerable dependency: undici@6.6.3 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: filesystem access detected permission_analyzer · 90%
medium Permission: network access detected permission_analyzer · 80%
critical Tool poisoning in 'query-docs': Directive language: 'you must' poisoning · 85%
critical Tool poisoning in 'resolve-library-id': Directive language: 'you must' poisoning · 85%
info Tool 'query-docs' annotations are consistent annotation_checker · 80%
info Tool 'resolve-library-id' annotations are consistent annotation_checker · 80%
info Required env vars (20) manifest_parser · 80%
info Transport: stdio manifest_parser · 90%
info Tool: query-docs manifest_parser · 85%
info Tool: resolve-library-id manifest_parser · 85%
info package.json metadata manifest_parser · 100%