nordic_financial_mcp

Hostile

Score 38 / 100 · 27 files read · 1 critical, 0 high, 2 medium, 4 low findings

Report 9f89976adf23f56b · first scanned 2026-10-28 · scanned 4× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials94

exfiltration92

execution55

injection92

obfuscation98

files100

100 is clean. Deductions come only from the cited findings below.

criticalDownloads a remote file and pipes it straight into a shell interpreter

README.md · line 361 · rule C1

333 # Vector count curl http://localhost:6333/collections/nordic_company_data | python3 -m json.tool ``` ### Check MCP server pr

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions

(package) · line 1 · rule M3

static.modelcontextprotocol.io

mediumInstructions involve running commands with sudo

HANDOFF.md · line 13 · rule M6

**Start/restart:** `sudo systemctl restart alfred-dvm` **Logg:** `tail -f ~/logs/alfred_dvm.log` **DVM-nøkkel:** `npub1ncgh88pe8gq

low3 binary file(s) were not parsed (static text analysis only)

(package) · line 1 · rule L3

3 binary files

lowReads named environment variables (normal for API keys; listed in the permission summary)

alfred.py · line 44 · rule L1

d") UPSTREAM_URL = os.getenv("ALFRED_UPSTREAM_URL", "http://localhost:8003/mcp") QDRANT_HOST = os.getenv("QDRANT_HOST", "localhos

lowReads named environment variables (normal for API keys; listed in the permission summary)

mcp_server.py · line 25 · rule L1

QDRANT_HOST = os.getenv("QDRANT_HOST", "localhost") QDRANT_PORT = int(os.getenv("QDRANT_PORT", "6333")) RERANK_FETCH

lowReads named environment variables (normal for API keys; listed in the permission summary)

test_x402_payment.py · line 12 · rule L1

pter PRIVATE_KEY = os.environ["WALLET_PRIVATE_KEY"] URL = "https://alfred.aidatanorge.no/report?company=Equinor" account = Accou

Network endpoints: aidatanorge.noalexandria.aidatanorge.noalfred.aidatanorge.noapi.cdp.coinbase.comapi3.oslo.oslobors.noavoindata.prh.ficvrapi.dkdata.brreg.noexample.comgithub.comglama.aimcp.aidatanorge.nomcp.sonewsweb.oslobors.noregistry.modelcontextprotocol.iosmithery.aistatic.modelcontextprotocol.ioweb-api.tp.entsoe.euwww.contributor-covenant.orgwww.hvakosterstrommen.nox402.org
Environment read: ALFRED_UPSTREAM_URLANTHROPIC_API_KEYCDP_API_KEY_NAMECDP_API_KEY_PRIVATE_KEYENTSOE_API_KEYEVM_ADDRESSFACILITATOR_URLFAST_MODEMCP_PORTMCP_TRANSPORTQDRANT_COLLECTIONQDRANT_HOSTQDRANT_PORTWALLET_PRIVATE_KEYX402_NETWORK
Shell execution: no
Install hooks: none
Credential material: Reads named environment variables (normal for API keys; listed in the permission summary)

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.