Back to search
medium low high low
D
40 /100
io.github.isucorp-taimiralain/stackguide-mcp
Author isucorp-taimiralain
Scanned 47d ago
Dynamic context loading for AI assistants with TDD workflow and AST analysis
Versions
4.1.3scoredfirst seen May 19, 2026
Trust breakdown
Tools 3
test-tool annotations: none low
analyze annotations: none low
setup annotations: none low
Permissions 4
network Server uses network capabilities via: fetch() filesystem Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path shell Server uses shell capabilities via: child_process, spawnSync() env_vars Server uses env_vars capabilities via: process.env Scan Findings 30
low
Tool 'test-tool' has no annotations
low
Tool 'analyze' has no annotations
low
Tool 'setup' has no annotations
medium
OAuth implementation without PKCE
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w)
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-82fw-gwwq-j7x9)
info
package.json metadata
info
Tool: test-tool
info
Tool: analyze
info
Tool: setup
info
Transport: stdio
info
Required env vars (4)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 15 components
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/express/best-practices/express-best-practices.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/nestjs/best-practices/nestjs-best-practices.md
critical
Database URL with Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/rust/best-practices/rust-best-practices.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/rust/best-practices/rust-best-practices.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/golang/best-practices/golang-best-practices.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/rules/python-flask/best-practices/flask-best-practices.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/knowledge/react-typescript/architecture/architecture-guide.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/knowledge/python-fastapi/patterns/design-patterns.md
high
Hardcoded Password found in isucorp-taimiralain-StackGuide-MCP-eee037d/data/knowledge/python-flask/patterns/design-patterns.md
medium
No build provenance detected (SLSA L0)