anki-mcp-server-addon

Risky

Score 71 / 100 · 80 files read · 0 critical, 1 high, 1 medium, 2 low findings

Report b17a4f8f4eb02689 · first scanned 2026-10-28 · scanned 1× · keyed to the exact package contents, so this link always shows this version

Subscores

credentials74

exfiltration92

execution100

injection100

obfuscation100

files100

100 is clean. Deductions come only from the cited findings below.

highTouches the Docker config (registry tokens) in a file that also opens network connections

CLAUDE.md · line 549 · rule H1

pe` is opted in by `.docker/config.json`) and the filtered suite (port 3142, `docker-compose.filtered.yml`, which sets `disabled_t

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions

(package) · line 1 · rule M3

static.modelcontextprotocol.io

lowReads named environment variables (normal for API keys; listed in the permission summary)

.github/scripts/check_registry_version.py · line 219 · rule L1

github_output = os.environ.get("GITHUB_OUTPUT") if not github_output: return with open(github_output, "a", enc

lowReads named environment variables (normal for API keys; listed in the permission summary)

.github/scripts/resolve_version.py · line 85 · rule L1

github_output = os.environ.get("GITHUB_OUTPUT") if github_output: with open(github_output, "a", encoding="utf-8")

Network endpoints: addon-docs.ankiweb.netanatoly.devankimcp.aiankiweb.netapps.ankiweb.netforum.ankimcp.aigithub.cominspector.example.commodelcontextprotocol.iomyapp.examplenodejs.orgpypi.orgregistry.modelcontextprotocol.iostatic.modelcontextprotocol.iotunnel.ankimcp.aiweb.ankimcp.aiwww.supermemo.com
Environment read: GITHUB_OUTPUT
Shell execution: yes — code or scripts can run shell commands
Install hooks: none
Credential material: Touches the Docker config (registry tokens) in a file that also opens network connections
Reads named environment variables (normal for API keys; listed in the permission summary)

Interest list only. We store the address and this report link, nothing else. No mail is sent in v1.