github Python analyzed c2cad3b

cognis-digital/mcpforge

Scaffold, test, and publish MCP servers in minutes

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport stdio counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit c2cad3b · analyzer v33 · 2w ago

dynamic code execution eval()/exec() cognis-digital-mcpforge-c2cad3b/mcpforge/core.py :341 exec(compiled, ns) # noqa: S102 - we generated this source ourselves

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 27

fs cognis-digital-mcpforge-c2cad3b/mcpforge/cli.py :37 with open(path, "r", encoding="utf-8") as fh:
fs cognis-digital-mcpforge-c2cad3b/mcpforge/connect.py :73 text = sys.stdin.read() if a.input == "-" else open(a.input, encoding="utf-8").read()

net cognis-digital-mcpforge-c2cad3b/integrations/webhook.py :8 import argparse, json, sys, urllib.request
net cognis-digital-mcpforge-c2cad3b/livesearch.py :28 import urllib.parse