Back to search
medium low high low
? Not scanned yet
io.github.enessari/metabase-ai-assistant
Author enessari
Scanned 48d ago
MCP Server for Metabase - 111 tools for SQL generation, dashboards & PostgreSQL
Versions
3.2.0first seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 4
network Server uses network capabilities via: fetch() filesystem Server uses filesystem capabilities via: fs, fs sync ops, fs.promises shell Server uses shell capabilities via: child_process, spawn() env_vars Server uses env_vars capabilities via: process.env Scan Findings 46
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: axios@1.7.9 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-43fc-jf86-j433)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-4hjh-wcwx-xvwj)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-jr5f-v2jv-69x6)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.7.9 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: mysql2@3.14.3 (GHSA-3f6p-5ww8-9rcr)
medium
Vulnerable dependency: mysql2@3.14.3 (GHSA-rgwj-5xj2-c3m3)
info
package.json metadata
info
Transport: stdio
info
Required env vars (19)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 573 components
critical
Database URL with Password found in enessari-metabase-ai-assistant-009ae02/src/utils/pii-masker.js
high
Hardcoded Password found in enessari-metabase-ai-assistant-009ae02/src/utils/pii-masker.js
high
Hardcoded Password found in enessari-metabase-ai-assistant-009ae02/src/mcp/handlers/schema.js
medium
No build provenance detected (SLSA L0)