← Back to search Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
@openfairygui/mcp
FairyGUI Headless Authoring SDK - MCP server adapter for the backend runtime.
C
74.1 / 100
Versions
0.2.0-alpha.3latestApr 30, 2026
0.2.0-alpha.2Apr 28, 2026
0.2.0-alpha.1Apr 28, 2026
0.2.0-alpha.0Apr 27, 2026
Tools 2
host_probe annotations: none low
host_late annotations: none low
Permissions 3
filesystem low shell high env_vars low Scan Findings 36
info
Transport: stdio
info
Required env vars (8)
info
Sandbox failed to start for output poisoning scan
info
Tool: host_late
low
Tool 'host_probe' has no annotations
low
Tool 'host_late' has no annotations
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: sharp@0.34.5 (GHSA-f88m-g3jw-g9cj)
medium
Vulnerable dependency: sharp@0.34.5 (GHSA-rgj7-g3m4-5g8c)
medium
Vulnerable dependency: mermaid@11.16.0 (GHSA-2v8p-3f2j-5mp7)
medium
Vulnerable dependency: mermaid@11.16.0 (GHSA-3rrr-jr9j-h3q3)
medium
Vulnerable dependency: mermaid@11.16.0 (GHSA-6x64-9x62-f2gx)
medium
Vulnerable dependency: mermaid@11.16.0 (GHSA-c4c3-pg64-4m4v)
medium
Vulnerable dependency: mermaid@11.16.0 (GHSA-rhh3-jpg6-66xh)
medium
Vulnerable dependency: esbuild@0.21.5 (GHSA-67mh-4wv8-2f99)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-8gc5-j5rx-235r)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-fj3w-jwp8-x2g3)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-gh4j-gqv2-49f6)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-jmr7-xgp7-cmfj)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-jp2q-39xq-3w4g)
medium
Vulnerable dependency: fast-xml-parser@5.0.0 (GHSA-m7jm-9gc2-mpf2)
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/examples/publish-restore/index.mjs:32
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/examples/reward-panel-states/index.mjs:41
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/examples/reward-card-generation/index.mjs:34
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/scripts/consumer/runtime.mjs:159
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/scripts/consumer/runtime.mjs:547
medium
Buffer.from base64 in OpenFairyGUI-OpenFairyGUI-cdb0dff/packages/cli/test/docs-doctor.integration.test.ts:52
medium
Hex string literal (>50 chars) in OpenFairyGUI-OpenFairyGUI-cdb0dff/packages/backend/src/generated/docs.ts:7
medium
Hex string literal (>50 chars) in OpenFairyGUI-OpenFairyGUI-cdb0dff/packages/backend/src/generated/contracts.ts:24158
info
package.json metadata
info
Tool: host_probe
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 34 components
medium
No build provenance detected (SLSA L0)