Secure MCP setup, where users can define the permission set instead of allowing the tool to access and execute anything.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 0f87f38 · analyzer v33 · 22h ago
danger signals1
- dynamic code execution eval()/exec() AistyAI-AistyMCP-0f87f38/tests/test_readme_examples.py :70
exec(compile(source, "README.md", "exec"), namespace)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 17
filesystem 1
- fs (weak) AistyAI-AistyMCP-0f87f38/tests/test_readme_examples.py :8
import pathlib
declared dependencies 1
- pytest@>=7.0