Back to search
? Not scanned yet

io.github.hidai25/evalview-mcp

Author hidai25
Scanned 48d ago

Regression testing for AI agents. Golden baselines, CI/CD, LangGraph, CrewAI, OpenAI, Claude.

MCP Registry

Versions

0.6.0
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 5

network Server uses network capabilities via: aiohttp, fetch(), http, httpx, requests, socket, urllib
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, glob, open(), os, path, pathlib, shutil, tempfile
low
shell Server uses shell capabilities via: subprocess
high
database Server uses database capabilities via: sqlite3
medium
env_vars Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
low

Scan Findings 52

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: yaml@2.3.4 (GHSA-48c2-rrv3-qjmp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.2 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@1.2.2 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: fastapi@0.100.0 (PYSEC-2024-38) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (GHSA-mr82-8j83-vxmv) dependency_analyzer · 95%
medium
Vulnerable dependency: pydantic@2.0.0 (PYSEC-2026-1812) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2.0 (GHSA-g48c-2wqr-h844) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2.0 (PYSEC-2026-2194) dependency_analyzer · 95%
medium
Vulnerable dependency: langgraph@0.2.0 (PYSEC-2026-83) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.1.0 (GHSA-r7w7-9xr2-qq2r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-openai@0.1.0 (PYSEC-2026-76) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-2g6r-c272-w58r) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-5chr-fjjv-38qv) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-6qv9-48xg-fc7f) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-926x-3r5x-gfhw) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-c67j-w6g6-q2cm) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-pjwx-r37v-7724) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (GHSA-qh6h-p6c9-ff54) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-1517) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-1518) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-2193) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-2562) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-2563) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-2564) dependency_analyzer · 95%
medium
Vulnerable dependency: langchain-core@0.2.0 (PYSEC-2026-373) dependency_analyzer · 95%
medium
Vulnerable dependency: click@8.1.0 (PYSEC-2026-2132) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (GHSA-cpwx-vrp4-4pq7) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (GHSA-gmj6-6f8f-6699) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (GHSA-h5c8-rqwp-cp95) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (GHSA-h75v-3vvj-5mfj) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (GHSA-q2x7-8rv6-6q7h) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (PYSEC-2026-1471) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (PYSEC-2026-1472) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (PYSEC-2026-1473) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (PYSEC-2026-1474) dependency_analyzer · 95%
medium
Vulnerable dependency: jinja2@3.0 (PYSEC-2026-1475) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
pyproject.toml metadata manifest_parser · 100%
info
Required env vars (61) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 18 components sbom_generator · 100%
high
Generic API Key Assignment found in hidai25-eval-view-394f7d7/evalview/telemetry/client.py secret_scanner · 75%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%