github Python analyzed 69eef94 deep scan · partial (350/5,162 files)

pipeshub-ai/pipeshub-ai

PipesHub is an open-source platform for securely connecting enterprise knowledge to AI. Give AI agents trusted context and your team permission-aware search with verified citations across your business systems.

maintainer: pipeshub-ai
licence: Apache-2.0
first seen: 2026-09-12
last seen: 2026-09-17
releases · 30d: 2
short id

risk 39/100 · heuristic grade

C elevated inferred analyzer v33 (current)

capability exposure inferred + 35
tool safety inferred + 12
trust mitigators mixed − 8

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 5d ago · see ecosystem CVEs →

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

committed secret: Slack token, private key · dynamic exec: __import__(), eval()/exec() · credential logged in 1 file(s)

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 69eef94 · analyzer v33 · 2h ago

skills & prompt files 13

danger signals47

dynamic code execution __import__() pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/core/registry/connector_registry.py :199 module = __import__(module_path, fromlist=['*'])
dynamic code execution eval()/exec() pipeshub-ai-pipeshub-ai-69eef94/backend/python/code-generator/slack.py :453 exec(code, ns)
dynamic code execution __import__() pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/conftest.py :88 __import__(name)
suspicious endpoint 1.1.1.1 pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/api/routes/health.py :40 _OUTBOUND_PROBE_URL = "https://1.1.1.1/"
suspicious endpoint app.posthog.com (telemetry) pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/client/posthog/posthog.py :40 endpoint: str = "https://app.posthog.com/api/graphql",
suspicious endpoint app.posthog.com (telemetry) pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/posthog/example.py :36 POSTHOG_HOST = os.getenv("POSTHOG_HOST", "https://app.posthog.com")
suspicious endpoint 169.254.169.254 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/agents/mcp/test_dcr.py :221 metadata = await discover_oauth_metadata("https://169.254.169.254")
suspicious endpoint 100.100.100.200 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/agents/mcp/test_dcr.py :343 "http://100.100.100.200/latest/meta-data",
suspicious endpoint 168.63.129.16 pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/agents/mcp/test_dcr.py :344 "http://168.63.129.16/machine?comp=goalstate",
suspicious endpoint 8.8.8.8 pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/api/routes/test_health.py :2215 assert _endpoint_is_local("http://8.8.8.8:8000") is False
suspicious endpoint 169.254.169.254 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/api/routes/test_mcp_servers.py :797 await discover_oauth_metadata_endpoint(request, OAuthDiscoveryRequest(url="http://169.254.169.254/"))
suspicious endpoint 93.184.215.14 pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_public_http.py :95 assert str(plan.request_url) == "https://93.184.215.14:8443/a?b=1"
suspicious endpoint 169.254.169.254 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_public_http.py :147 "http://169.254.169.254/latest/meta-data",
suspicious endpoint 169.254.169.254 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_url_fetcher.py :481 fetch_url("http://169.254.169.254/latest/meta-data/")
suspicious endpoint 8.8.8.8 pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_url_fetcher.py :679 validate_public_http_url("http://8.8.8.8/path")
suspicious endpoint 100.100.100.200 (cloud metadata) pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_url_fetcher.py :959 "http://100.100.100.200/latest/meta-data",
suspicious endpoint 168.63.129.16 pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_url_fetcher.py :989 "http://168.63.129.16/machine?comp=goalstate", # Azure WireServer (public space)
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/agents/actions/google/docs/docs.py :89 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/agents/actions/google/drive/drive.py :217 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope gmail.modify pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/agents/actions/google/gmail/gmail.py :131 "https://www.googleapis.com/auth/gmail.modify"
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/agents/actions/google/sheets/sheets.py :108 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/core/registry/connector.py :222 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/core/registry/connector.py :224 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/core/registry/connector.py :297 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope gmail.modify pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/sources/google/common/scopes.py :24 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/sources/google/common/scopes.py :31 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/sources/google/common/scopes.py :52 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/connectors/sources/google/common/scopes.py :56 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://mail.google.com/ expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/modules/retrieval/retrieval_service.py :511 if weburl and weburl.startswith("https://mail.google.com/mail?authuser="):
over-broad OAuth scope site_admin pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/github/example.py :74 "site_admin",
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/google/docs/example.py :36 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/google/docs/example.py :37 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/google/forms/example.py :29 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/google/sheets/example.py :27 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/utils/aimodels.py :334 scopes=["https://www.googleapis.com/auth/cloud-platform"],
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/code-generator/google.py :38 'scope_example': 'https://www.googleapis.com/auth/drive'
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/code-generator/google.py :53 'scope_example': 'https://www.googleapis.com/auth/spreadsheets'
over-broad OAuth scope https://www.googleapis.com/auth/documents expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/code-generator/google.py :58 'scope_example': 'https://www.googleapis.com/auth/documents'
over-broad OAuth scope https://mail.google.com/ expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/agents/actions/knowledge_graph/test_knowledge_graph_lookup.py :369 url = "https://mail.google.com/mail/u/0/#inbox/abc123def456"
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/connectors/api/test_router_update_config.py :145 "scopes": ["https://www.googleapis.com/auth/drive"],
over-broad OAuth scope https://mail.google.com/ expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/modules/retrieval/test_retrieval_service.py :1041 "webUrl": "https://mail.google.com/mail?authuser={user.email}",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/sources/client/test_google_client.py :42 "scope": "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/drive expected for this server's purpose pipeshub-ai-pipeshub-ai-69eef94/integration-tests/connectors/google_drive_workspace/drive_workspace_test_utils.py :28 FULL_DRIVE_SCOPE = "https://www.googleapis.com/auth/drive"
committed secret Slack token pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/connectors/test_oauth_service.py :268 xoxp-u…(15 chars, redacted)
committed secret Slack token pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/sources/client/test_slack_client.py :409 xoxb-o…(27 chars, redacted)
committed secret private key pipeshub-ai-pipeshub-ai-69eef94/backend/python/tests/unit/utils/test_aimodels_vertex_ai.py :24 PEM private key block (redacted)
credential in logs credential in log pipeshub-ai-pipeshub-ai-69eef94/backend/python/app/sources/external/dropbox/example.py :15 print(ACCESS_TOKEN)

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:pipeshub-ai/pipeshub-ai/badge.svg)](https://mcpobservatory.com/servers/github:pipeshub-ai/pipeshub-ai/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of pipeshub-ai.

pipeshub-ai/pipeshub-ai

skills & prompt files 13

danger signals47

Navigate

Stream

Features

Display