Back to search
C
71.8 /100

@pi-unipi/mcp

Author neuron-mr-white
Scanned 47d ago

MCP server management extension for Pi coding agent — browse, add, configure, and use MCP servers

npm

Versions

No versions found.

Trust breakdown

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

spawn_helper
annotations: none low

Launch a sub-agent for parallel work. Available agent types: ${availableTypes} Custom types can be defined in: - ~/.unipi/config/agents/<name>.md (global) - <workspace>/.unipi/config/agents/<name>.md (project) Guidelines: - Use "explore" or "scout" for parallel file reads / fast codebase recon - Use "work" or "worker" for parallel file writes (transparent locking) - Use "reviewer" for code review of diffs, plans, or solutions - Use "researcher" for web research (needs web-api tools) - Use "oracle" for a second opinion on decisions before acting - Use "delegate" for a lightweight general delegate - Use run_in_background for work you don't need immediately - ESC kills all running agents immediately - Agents inherit the parent model by default

get_helper_result
annotations: none low

Check status and retrieve results from a background agent or async run. Use view: true to open a live conversation overlay; nonBlocking: true to subscribe and be woken on completion.

Permissions 5

network Server uses network capabilities via: fetch(), http, httpx, net
medium
filesystem Server uses filesystem capabilities via: fs, fs sync ops, fs/promises, open(), os, path, pathlib
low
shell Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync()
high
database Server uses database capabilities via: better-sqlite3, sqlite3
medium
env_vars Server uses env_vars capabilities via: os.environ, process.env
low

Scan Findings 32

low
Tool 'spawn_helper' has no annotations annotation_checker · 100%
low
Tool 'get_helper_result' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 58 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: diff@7.0.0 (GHSA-73rr-hh4g-fpgx) dependency_analyzer · 95%
medium
Vulnerable dependency: esbuild@0.27.7 (GHSA-g7r4-m6w7-qqqr) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-2883-xcg3-v3hh) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-52cp-r559-cp3m) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-5p4m-2wfm-xmqj) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-h67p-54hq-rp68) dependency_analyzer · 95%
medium
Vulnerable dependency: js-yaml@4.1.0 (GHSA-mh29-5h37-fv8m) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@4.1.5 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: defuddle@0.18.1 (GHSA-jg4p-g6xj-4qmf) dependency_analyzer · 95%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/background-tasks/src/delegate/result-package.ts:91 entropy_analyzer · 75%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/background-tasks/src/delegate/result-package.ts:387 entropy_analyzer · 75%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/background-tasks/src/__tests__/scripted-provider/delegate-child-guard.test.ts:329 entropy_analyzer · 75%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/image/tests/image-source.test.ts:24 entropy_analyzer · 75%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/image/src/image-source.ts:186 entropy_analyzer · 75%
medium
Buffer.from base64 in Neuron-Mr-White-UniPi-6d696ef/packages/image/src/generate.ts:99 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: spawn_helper manifest_parser · 75%
info
Tool: get_helper_result manifest_parser · 75%
info
Required env vars (57) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 386 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%