preflight

https://github.com/AdonaiVera/fiftyone-mcp-server

fiftyone-mcp-server

Caution

Score 91 / 100 · 43 files read · 0 critical, 0 high, 1 medium, 1 low findings

Report 816a0f2bcba8dda2 · first scanned 2026-10-28 · scanned 3× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials100
exfiltration92
execution100
injection100
obfuscation98
files100

100 is clean. Deductions come only from the cited findings below.

Findings

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions
(package) · line 1 · rule M3
static.modelcontextprotocol.io
low2 binary file(s) were not parsed (static text analysis only)
(package) · line 1 · rule L3
2 binary files

Permission surface

Network endpoints
cursor.comdiscord.ggdocs.voxel51.comeslint.orgfiftyone.aigithub.comgithub.github.comgoogle.github.iohuggingface.coimg.shields.ioinsiders.vscode.devmedium.commodelcontextprotocol.ioprettier.iopylint.readthedocs.iopypi.orgpypi.python.orgshare.hsforms.comstatic.modelcontextprotocol.iouser-images.githubusercontent.comvoxel51.comwww.linkedin.comwww.npmjs.comwww.sphinx-doc.orgx.com
Environment read
no named variables
Shell execution
no
Install hooks
none
Credential material
none referenced

Provenance

Source
GitHub
Repository
AdonaiVera/fiftyone-mcp-server
Owner
voxel51
Stars
26
Forks
7
Repo created
2025-11-21
Last push
2026-10-28

Badge for the author

Preflight grade

[![Preflight: Caution](https://preflight.orbitaldeskllc.com/badge/816a0f2bcba8dda2.svg)](https://preflight.orbitaldeskllc.com/b/816a0f2bcba8dda2)

The badge links back to this report and updates if the package is re-scanned at a new version.

Watch this package

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.

Share this report: https://preflight.orbitaldeskllc.com/r/816a0f2bcba8dda2