Local, typed MCP server for controlling Autodesk Maya via commandPort
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in GimbalGoats/GG_MayaMCP
- HIGH code analysis flagged dynamic code execution ×3 in GimbalGoats/GG_MayaMCP
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 06862e0 · analyzer v28 · 2h ago
danger signals4
- dynamic code execution eval()/exec() GimbalGoats-GG_MayaMCP-06862e0/scripts/enable_commandport.py :57
exec( - dynamic code execution eval()/exec() GimbalGoats-GG_MayaMCP-06862e0/scripts/userSetup.py :69
exec( - dynamic code execution eval()/exec() GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/maya_panel/commandport_compat.py :79
exec( - dynamic code execution eval()/exec() GimbalGoats-GG_MayaMCP-06862e0/tests/test_transport_commandport.py :374
probe_result = json.loads(eval(compile(sent[0], "<probe>", "eval")))
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 94
filesystem 6
- fs GimbalGoats-GG_MayaMCP-06862e0/packaging/autodesk/generate_manifest.py :9
from pathlib import Path - fs GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/maya_panel/controller.py :95
port: Port number to open (1-65535). - fs GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/registrars/scene.py :163
"Path to the Maya scene file to open (.ma or .mb)", - fs GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/tools/viewport.py :11
import shutil - fs GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/utils/script_config.py :13
from pathlib import Path - fs GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/utils/script_validation.py :9
from pathlib import Path
network 1
- net GimbalGoats-GG_MayaMCP-06862e0/src/maya_mcp/transport/commandport.py :35
import socket
declared dependencies 8
- fastmcp@>=3.2.4,<4
- typing-extensions@>=4.12.0
- ruff@>=0.4.0
- mypy@>=1.10.0
- pytest@>=8.0.0
- pytest-asyncio@>=0.23.0
- mkdocs@>=1.6.0
- mkdocs-material@>=9.5.0