github Python analyzed 360ece2

StealHD/infohub-light

github

Privacy-first, self-hosted multi-user information hub for RSS, GitHub, Reddit, Telegram, Hacker News, and MCP.

maintainer
StealHD
licence
MIT
first seen
2026-08-20
last seen
2026-09-17
releases · 30d
16
short id

StealHD/infohub-light is an MCP server distributed on github, maintained by StealHD, tracked here since August 2026. It has shipped 32 releases and exposes 22 tools. Tools include apply_subscription_change, apply_system_settings_change, diagnose_job, diagnose_source, get_item, get_job, and 16 more. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 22 tools appear to reach filesystem, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-17: 5 tools added.

full security breakdown →
tools 20 of 22
  • apply_subscription_change
  • apply_system_settings_change
  • diagnose_job
  • diagnose_source
  • get_item
  • get_job
  • get_my_feed
  • get_source_setup_guide
  • list_available_sources
  • list_jobs
  • list_my_information_automations
  • list_subscriptions
  • list_system_settings
  • prepare_create_subscription
  • prepare_delete_subscription
  • prepare_information_automation
  • prepare_update_subscription
  • prepare_update_system_settings
  • query_operation_logs
  • resolve_source
All 22 tools →
release cadence · 90d 32 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
v2.6.19 2026-09-12 github
v2.6.18 2026-09-11 github
v2.6.17 2026-09-10 github
v2.6.16 2026-09-10 github
v2.6.15 2026-09-10 github
v2.6.14 2026-09-10 github
v2.6.13 2026-09-09 github
v2.6.12 2026-09-09 github
v2.6.8 2026-09-04 github
v2.6.3 2026-08-30 github

view all →