Back to search
? Not scanned yet

io.github.jnMetaCode/shellward

Author jnMetaCode
Scanned 47d ago

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

MCP Registry

Versions

0.5.11
first seen May 19, 2026

Tools 0

No tools indexed yet.

Permissions 4

network Server uses network capabilities via: fetch()
medium
filesystem Server uses filesystem capabilities via: fs, path
low
shell Server uses shell capabilities via: child_process, execSync(), spawn()
high
env_vars Server uses env_vars capabilities via: process.env
low

Scan Findings 37

medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-3f6p-5ww8-9rcr) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-49j4-86m8-q2jw) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-4rch-2fh8-94vw) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-fpw7-j2hg-69v5) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-mqr2-w7wj-jjgr) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-pmh2-wpjm-fj45) dependency_analyzer · 95%
medium
Vulnerable dependency: mysql2@3.0.0 (GHSA-rgwj-5xj2-c3m3) dependency_analyzer · 95%
medium
High-entropy string (6.10 bits/char) in jnMetaCode-shellward-a5ea11c/src/cli.ts:159 entropy_analyzer · 56%
medium
High-entropy string (6.56 bits/char) in jnMetaCode-shellward-a5ea11c/src/core/engine.ts:165 entropy_analyzer · 63%
medium
High-entropy string (5.76 bits/char) in jnMetaCode-shellward-a5ea11c/src/compliance/html-report.ts:172 entropy_analyzer · 51%
medium
High-entropy string (5.74 bits/char) in jnMetaCode-shellward-a5ea11c/src/compliance/report.ts:73 entropy_analyzer · 51%
medium
High-entropy string (5.79 bits/char) in jnMetaCode-shellward-a5ea11c/src/compliance/report.ts:126 entropy_analyzer · 51%
medium
High-entropy string (5.77 bits/char) in jnMetaCode-shellward-a5ea11c/src/compliance/report.ts:138 entropy_analyzer · 51%
medium
High-entropy string (5.81 bits/char) in jnMetaCode-shellward-a5ea11c/src/compliance/report.ts:249 entropy_analyzer · 52%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 5 components sbom_generator · 100%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/README.md secret_scanner · 95%
high
Hardcoded Password found in jnMetaCode-shellward-a5ea11c/README.md secret_scanner · 65%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/bench/corpus.ts secret_scanner · 95%
critical
GitHub Personal Access Token found in jnMetaCode-shellward-a5ea11c/bench/corpus.ts secret_scanner · 95%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/bench/scan-bench.ts secret_scanner · 95%
critical
GitHub Personal Access Token found in jnMetaCode-shellward-a5ea11c/bench/scan-bench.ts secret_scanner · 95%
critical
RSA Private Key found in jnMetaCode-shellward-a5ea11c/bench/scan-bench.ts secret_scanner · 95%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/demo/demo-zh.ts secret_scanner · 95%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/demo/demo-en.ts secret_scanner · 95%
critical
AWS Access Key ID found in jnMetaCode-shellward-a5ea11c/src/web/scan-server.ts secret_scanner · 95%
critical
GitHub Personal Access Token found in jnMetaCode-shellward-a5ea11c/src/web/scan-server.ts secret_scanner · 95%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%