The open-source AI teammate for Slack. Self-hosted, credential-isolated, every tool call audited.
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
- D · 67 → D · 64
- C · 59 → D · 67
- A · 10 → C · 59
No known CVEs for this server.
- high dangerous code
committed secret: Slack token, Slack app token, GitHub token
analyzed commit 9120828 · analyzer v33 · 1w ago
skills & prompt files 3
danger signals12
- suspicious endpoint 169.254.169.254 (cloud metadata) getlibero-libero-9120828/packages/proxy/src/custody-aws-client.ts :53
export const DEFAULT_IMDS_ENDPOINT = "http://169.254.169.254"; - over-broad OAuth scope delete_repo getlibero-libero-9120828/apps/proxy-server/src/audit-cli.test.ts :79
{ at: NOON + 1000, tool: "delete_repo", outcome: "refused", refusalReason: "tool_not_allowed" }, - over-broad OAuth scope delete_repo getlibero-libero-9120828/e2e/src/attempt-record.test.ts :145
tool: "delete_repo", - over-broad OAuth scope delete_repo getlibero-libero-9120828/packages/proxy/src/audit-db.test.ts :1872
db.append(record({ at: NOON + 1, channel: CHANNEL, server: "github", tool: "delete_repo", outcome: "refused", refusalReason: "tool_not_allowed", task: "t-1" })); - over-broad OAuth scope delete_repo getlibero-libero-9120828/packages/proxy/src/enforce.test.ts :361
{ name: "delete_repo", approval: "none" }, - over-broad OAuth scope delete_repo getlibero-libero-9120828/packages/schema/src/refusal.test.ts :11
tool_not_allowed: { reason: "tool_not_allowed", server: "github", tool: "delete_repo" }, - over-broad OAuth scope delete_repo getlibero-libero-9120828/site/scripts/build-assets.mjs :180
el('div', { style: { flex: 1 } }, 'github.delete_repo'), - committed secret Slack token getlibero-libero-9120828/packages/agent/src/proxy/tools.test.ts :485
xoxb-n…(31 chars, redacted) - committed secret Slack app token getlibero-libero-9120828/packages/cli/src/doctor-cli.test.ts :27
xapp-1…(35 chars, redacted) - committed secret Slack token getlibero-libero-9120828/packages/schema/src/names.ts :18
xoxb-2…(20 chars, redacted) - committed secret GitHub token getlibero-libero-9120828/packages/schema/src/refusal.test.ts :129
ghp_16…(40 chars, redacted) - committed secret Slack token getlibero-libero-9120828/packages/schema/src/refusal.test.ts :129
xoxb-2…(20 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:getlibero/libero/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of getlibero.