github Python analyzed 7e7f1f6

lasso-security/mcp-gateway

A plugin-based gateway that orchestrates other MCPs and allows developers to build upon it enterprise-grade agents.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport stdio counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 7e7f1f6 · analyzer v33 · 2w ago

committed secret HuggingFace token lasso-security-mcp-gateway-7e7f1f6/README.md :174 hf_okp…(37 chars, redacted)
committed secret GitHub token lasso-security-mcp-gateway-7e7f1f6/tests/simple_pii_example.py :4 gho_16…(40 chars, redacted)
committed secret GitHub token lasso-security-mcp-gateway-7e7f1f6/tests/test_basic_guardrail.py :42 gho_16…(40 chars, redacted)

code evidence vv1.2.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 31

fs lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/config.py :4 from pathlib import Path
fs lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/plugins/tracing/xetrack.py :9 from pathlib import Path
fs lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/security_scanner/config.py :3 from pathlib import Path
fs lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/security_scanner/scanner.py :4 from pathlib import Path # Added for path manipulation
fs (weak) lasso-security-mcp-gateway-7e7f1f6/tests/test_basic_guardrail.py :19 with open(
fs (weak) lasso-security-mcp-gateway-7e7f1f6/tests/xetrack_tracing_test.py :60 with open(os.path.join(temp_directory, 'logs', logs_path), 'r') as f:

net lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/plugins/guardrails/lasso.py :5 import httpx
net lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/security_scanner/github_collector.py :1 import requests
net lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/security_scanner/npm_collector.py :6 import requests
net lasso-security-mcp-gateway-7e7f1f6/mcp_gateway/security_scanner/smithery_collector.py :1 import requests
net (weak) lasso-security-mcp-gateway-7e7f1f6/tests/simple_pii_example.py :1 import requests
net (weak) lasso-security-mcp-gateway-7e7f1f6/tests/test_basic_guardrail.py :46 assert "import requests" in cleaned_text
net (weak) lasso-security-mcp-gateway-7e7f1f6/tests/test_lasso_guardrail_pii.py :12 import httpx

secrets (weak) lasso-security-mcp-gateway-7e7f1f6/tests/test_lasso_guardrail.py :72 original_api_key = os.environ.get("LASSO_API_KEY")
secrets (weak) lasso-security-mcp-gateway-7e7f1f6/tests/test_lasso_guardrail_pii.py :60 @pytest.mark.skipif(not os.environ.get("LASSO_API_KEY"), reason="LASSO_API_KEY not set")