Waggle-mcp

Hostile

Score 26 / 100 · 80 files read · 1 critical, 1 high, 2 medium, 1 low findings

Report 94cc8a1979b713f9 · first scanned 2026-10-28 · scanned 4× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials76

exfiltration92

execution55

injection92

obfuscation100

files100

100 is clean. Deductions come only from the cited findings below.

criticalDownloads a remote file and pipes it straight into a shell interpreter

third_party/rlm/README.upstream.md · line 62 · rule C1

of choice): ```bash curl -LsSf https://astral.sh/uv/install.sh | sh uv init && uv venv --python 3.12 # change version as needed u

highTouches an SSH private key file in a file that also opens network connections

docs/superpowers/plans/2026-08-10-release-automation-publishing.md · line 145 · rule H1

`*.pem`, `*.key`, `id_rsa`); and forbidden development roots (`.git`, `benchmark_results`, `build`, `dist`, `dist-release`, `grap

mediumCode contacts wagglemcp.vercel.app, which the documentation never mentions

(package) · line 1 · rule M3

wagglemcp.vercel.app

mediumInstructions involve running commands with sudo

integrations/waggle-installer/skills/install-waggle/SKILL.md · line 12 · rule M6

the sandbox or use `sudo`. 4. Report the script's result exactly: - If it says Waggle is already installed, stop. - If it su

lowReads named environment variables (normal for API keys; listed in the permission summary)

apps/mcp/graph-ui/playwright.config.js · line 6 · rule L1

ue, forbidOnly: !!process.env.CI, retries: process.env.CI ? 2 : 0, workers: process.env.CI ? 1 : undefined, reporter: "lin

Network endpoints: alexzhang13.github.ioapi.github.comarxiv.orgastral.shcert-manager.iodocs.astral.shdocs.docker.comdocs.primeintellect.aidocs.pypi.orggateway-api.sigs.k8s.iogithub.bloggithub.comimg.shields.iomarketplace.visualstudio.commodal.commodelcontextprotocol.iopostcss.orgpypi.orgreact.devregistry.modelcontextprotocol.iostatic.modelcontextprotocol.iotailwindcss.comvitejs.devwaggle-webmcp-api.onrender.comwaggle-webmcp.onrender.comwaggle.example.comwagglemcp.vercel.appyour-server.com
Environment read: CI
Shell execution: yes — code or scripts can run shell commands
Install hooks: none
Credential material: Touches an SSH private key file in a file that also opens network connections
Reads named environment variables (normal for API keys; listed in the permission summary)

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.