An AI butler tailored for personal computers - paying tribute to Jarvis from "Iron Man". It engages in conversation with you, assists you in operating your computer, resides in the background ready to respond to your summon, and is capable of both listening and speaking.
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 5
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- D · 60 → C · 57
- C · 52 → D · 60
No known CVEs for this server.
- medium dangerous code
dynamic exec: __import__ sink, __import__()
analyzed commit 04052b2 · analyzer v33 · 1d ago
danger signals4
- dynamic code execution __import__ sink aceFelix-jarvis-04052b2/agent/core/extensions/plugins.py :255
env={**__import__("os").environ, "GIT_SSL_NO_VERIFY": "1"}, - dynamic code execution __import__() aceFelix-jarvis-04052b2/agent/llm/provider_registry.py :57
mod = __import__(parts[0], fromlist=[parts[1]]) - dynamic code execution __import__() aceFelix-jarvis-04052b2/agent/serve/app.py :120
__import__(name) - dynamic code execution __import__ sink aceFelix-jarvis-04052b2/agent/ui/workbench/single_instance.py :65
if info is not None and info[0] == __import__("os").getpid():
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:aceFelix/jarvis/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of aceFelix.