github analyzed 489f7e0

MP-Tool/komodo-mcp-server

MCP server for Komodo - manage Docker containers, servers, stacks, and deployments via AI

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 489f7e0 · analyzer v33 · 4d ago

suspicious endpoint 1.2.3.4 MP-Tool-komodo-mcp-server-489f7e0/src/tools/schemas/server.ts :38 address: z.string().optional().describe("The ws/s address of the periphery client (e.g., http://1.2.3.4:8120)"),

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 82

fs (weak) MP-Tool-komodo-mcp-server-489f7e0/src/config/env.test.ts :4 import { writeFileSync, mkdtempSync } from "node:fs";
fs MP-Tool-komodo-mcp-server-489f7e0/src/config/env.ts :17 import { readFileSync } from "node:fs";
fs (weak) MP-Tool-komodo-mcp-server-489f7e0/src/tools/schemas/config-schema-drift.test.ts :4 import { readFileSync } from "node:fs";

shell MP-Tool-komodo-mcp-server-489f7e0/src/tools/terminal.ts :9 * - **Callback-based**: `execute_*_exec()` for container/deployment/stack exec (onLine/onFinish)

net MP-Tool-komodo-mcp-server-489f7e0/src/client.ts :68 const response = await fetch(`${normalized}/version`, {

secrets MP-Tool-komodo-mcp-server-489f7e0/src/config/env.ts :272 password: process.env["KOMODO_PASSWORD"] ?? readSecretFile(process.env["KOMODO_PASSWORD_FILE"]) ?? file?.password,

show 1 more