debugai-mcp

Hostile

Score 0 / 100 · 61 files read · 0 critical, 8 high, 12 medium, 11 low findings

Report c5d741ae3a236d7e · first scanned 2026-10-28 · scanned 4× · keyed to the exact package contents, so this link always shows this version

Listed in the Agent Census directory data

Subscores

credentials0

exfiltration70

execution28

injection100

obfuscation98

files84

100 is clean. Deductions come only from the cited findings below.

Findings

highTouches the SSH directory (~/.ssh) in a file that also opens network connections

README.md · line 138 · rule H1

the project: `../../.ssh/id_rsa` and a symlink pointing outside both fail the same check. - **Source files only**, by extension al

highReferences the SSH directory (~/.ssh)

src/explicitProject.ts · line 101 · rule H1

start and whose * `.ssh`, `.aws` and AppData would otherwise be readable; and the same seen from * Windows: a UNC server or shar

highThis package both touches credential material and sends data over the network (in different files) — review the flow before installing

src/explicitProject.ts · line 1 · rule H1

highReferences the SSH directory (~/.ssh)

src/project.ts · line 101 · rule H1

trace * naming `~/.ssh/config:1` was read and sent, and the facts walk ran under it. * `explicitProject` has refused such a roo

highReferences the SSH directory (~/.ssh)

src/sourceContext.ts · line 36 · rule H1

solution, so `../../.ssh/id_rsa` in a crafted error cannot * walk out * - secret-shaped names (.env, *.pem, id_rsa, *.key)

highReferences the SSH directory (~/.ssh)

src/workspaceFacts.ts · line 957 · rule H1

wed a symlink to `~/.ssh/authorized_keys` * (CVE-2026-50549). * * So when Tier 2 lands, the server names a PROBE and its parame

highReferences the SSH directory (~/.ssh)

test/explicitProject.test.ts · line 171 · rule H1

s begin) could read .ssh, .aws and // AppData, and /home, /Users and C:\Users were accepted as project roots. describe('tooBroadFo

highReferences an SSH private key file

test/sourceContext.test.ts · line 129 · rule H1

.local', '.npmrc', 'id_rsa', 'server.pem', 'creds.key']) { expect(isReadableSource(join(root, name))).toBe(false); } }

mediumCode contacts static.modelcontextprotocol.io, which the documentation never mentions

(package) · line 1 · rule M3

static.modelcontextprotocol.io

mediumCan run shell commands from code

src/cli/ui.ts · line 6 · rule M1

spawn } from 'node:child_process'; import { platform } from 'node:os'; const useColor = process.stdout.isTTY === true && !pr

mediumWrites files under the user home directory

src/config.ts · line 14 · rule M5

meSync, unlinkSync, writeFileSync } from 'node:fs'; import { homedir } from 'node:os'; import { dirname, join } from 'node:path';

mediumCan run shell commands from code

src/explicitProject.ts · line 32 · rule M1

leSync } from 'node:child_process'; import { realpathSync, statSync } from 'node:fs'; import { homedir } from 'node:os'; import {

mediumCan run shell commands from code

src/project.ts · line 41 · rule M1

leSync } from 'node:child_process'; import { tooBroad } from './explicitProject.js'; let cached: string | null | undefined; /**

mediumCan run shell commands from code

test/cli.e2e.test.ts · line 9 · rule M1

leSync } from 'node:child_process'; import { existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync

mediumCan run shell commands from code

test/e2e.test.ts · line 7 · rule M1

leSync } from 'node:child_process'; import { createHash } from 'node:crypto'; import { tmpdir } from 'node:os'; import { fileURLTo

mediumCan run shell commands from code

test/explicitProject.test.ts · line 4 · rule M1

leSync } from 'node:child_process'; import { mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'nod

mediumWrites files under the user home directory

test/explicitProject.test.ts · line 5 · rule M5

alpathSync, rmSync, writeFileSync } from 'node:fs'; import { homedir, tmpdir } from 'node:os'; import { join, relative } from 'nod

mediumCan run shell commands from code

test/hook.test.ts · line 7 · rule M1

spawn } from 'node:child_process'; import { mkdtempSync, realpathSync, rmSync } from 'node:fs'; import { tmpdir } from 'node:os';

mediumCan run shell commands from code

test/login.e2e.test.ts · line 7 · rule M1

er opened. import { execFile } from 'node:child_process'; import { createServer, type Server } from 'node:http'; import type { Add

mediumCan run shell commands from code

test/project.test.ts · line 5 · rule M1

leSync } from 'node:child_process'; import { createHash } from 'node:crypto'; import { getProjectRoot, gitToplevel, hashPath, reso

low1 binary file(s) were not parsed (static text analysis only)

(package) · line 1 · rule L3

1 binary files