← Back to search

io.github.artvepa80/hefestoai

artvepa80 streamable_http Scanned 17h ago

Pre-commit code quality guardian. Detects semantic drift in AI-generated code.

MCP Registry ↗
? Not scanned yet

Versions

4.9.3latest
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 5

network medium
Server uses network capabilities via: requests, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
shell high
Server uses shell capabilities via: subprocess
database medium
Server uses database capabilities via: sqlalchemy, sqlite3
env_vars low
Server uses env_vars capabilities via: os.environ, os.getenv()

Scan Findings 64

medium
Vulnerable dependency: requests@2.28.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastapi@0.100.0 (PYSEC-2024-38) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-j8r2-6x86-q33q) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2023-74) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-2275) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.0.0 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.0.0 (GHSA-6w46-j5rx-g56g) dependency_analyzer · 95%
medium
Vulnerable dependency: pytest@7.0.0 (PYSEC-2026-1845) dependency_analyzer · 95%
medium
Vulnerable dependency: black@23.0.0 (GHSA-fj7x-q9j7-g6q6) dependency_analyzer · 95%
medium
Vulnerable dependency: black@23.0.0 (PYSEC-2024-48) dependency_analyzer · 95%
medium
Vulnerable dependency: black@23.0.0 (PYSEC-2026-2120) dependency_analyzer · 95%
medium
Vulnerable dependency: black@23.0.0 (PYSEC-2026-2121) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.0.0,<9.0.0 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5.0,<3.0.0 (GHSA-5jqp-qgf6-3pvh) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5.0,<3.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5.0,<3.0.0 (PYSEC-2021-47) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.5.0,<3.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-462w-v97r-4m45) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-8r7q-cvjq-x353) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-cpwx-vrp4-4pq7) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-fqh9-2qgg-h84h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-g3rq-g295-4j3m) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-h5c8-rqwp-cp95) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-h75v-3vvj-5mfj) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-hj2j-77xm-mc5v) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (GHSA-q2x7-8rv6-6q7h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2014-8) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2014-82) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2019-217) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2019-220) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2021-66) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2026-1471) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2026-1473) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2026-1474) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.1.2,<4.0.0 (PYSEC-2026-1475) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Required env vars (23) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
high
Hardcoded Password found in artvepa80-Agents-Hefesto-981abf0/docs/CLAUDE_HEFESTO.md secret_scanner · 65%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 19 components sbom_generator · 100%
high
Hardcoded Password found in artvepa80-Agents-Hefesto-981abf0/README.md secret_scanner · 65%
high
Hardcoded Password found in artvepa80-Agents-Hefesto-981abf0/CLAUDE.md secret_scanner · 65%
high
Hardcoded Password found in artvepa80-Agents-Hefesto-981abf0/examples/basic_usage.py secret_scanner · 65%
high
Generic API Key Assignment found in artvepa80-Agents-Hefesto-981abf0/docs/GETTING_STARTED.md secret_scanner · 75%
high
Generic API Key Assignment found in artvepa80-Agents-Hefesto-981abf0/docs/PRO_OPTIONAL_FEATURES.md secret_scanner · 75%
high
Generic API Key Assignment found in artvepa80-Agents-Hefesto-981abf0/docs/INSTALLATION.md secret_scanner · 75%
high
Generic API Key Assignment found in artvepa80-Agents-Hefesto-981abf0/docs/ANALYSIS_RULES.md secret_scanner · 75%
critical
Database URL with Password found in artvepa80-Agents-Hefesto-981abf0/docs/ANALYSIS_RULES.md secret_scanner · 85%
high
Hardcoded Password found in artvepa80-Agents-Hefesto-981abf0/docs/ANALYSIS_RULES.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%