Fergana-Labs/stash

github
github Python analyzed 508fa3e

Open-source infrastructure for agents that learn from experience. Capture production traces and turn lessons into reusable knowledge and skills.

maintainer
Fergana-Labs
licence
MIT
first seen
2026-06-05
last seen
2026-10-13
releases · 30d
0
github stars
337 reported
short id

Fergana-Labs/stash is an MCP server distributed on github, maintained by Fergana-Labs, tracked here since June 2026. It has shipped 2 releases and exposes 91 tools. Tools include stash_add_column, stash_add_source, stash_annotate_trace, stash_batch_delete, stash_batch_move, stash_batch_restore, and 85 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 3 review prompts — dangerous code, exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 91 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-10-13: 22 tools added and 3 tools removed.

full security breakdown →

tools

20 of 91
  • stash_add_column
  • stash_add_source
  • stash_annotate_trace
  • stash_batch_delete
  • stash_batch_move
  • stash_batch_restore
  • stash_browse_source
  • stash_copy_file
  • stash_copy_folder
  • stash_copy_page
  • stash_create_folder
  • stash_create_page
  • stash_create_skill
  • stash_create_table
  • stash_delete_column
  • stash_delete_file
  • stash_delete_folder
  • stash_delete_page
  • stash_delete_row
  • stash_delete_session
All 91 tools →

release cadence · 90d

0 releases

No releases yet.

recent releases

last 2
version date src
pr-815-images 2026-07-15 github
gh-attach-assets 2026-05-18 github

view all →