MCP server that lets Claude run Google Earth Engine
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in prahaladuk2208-arch/geeflow
- HIGH code analysis flagged dynamic code execution in prahaladuk2208-arch/geeflow
transport stdio counts 18 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
build_composite
-
catalog_search
-
compute_indices
-
dataset_info
-
execute_code
-
export_composite
-
export_tasks
-
gee_init
-
lulc_analyze
-
lulc_check
-
lulc_classify
-
lulc_collector_script
-
lulc_feature_stack
-
lulc_validate
-
region_stats
-
sample_polygons
-
scene_availability
-
thumbnail
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 253beaf · analyzer v28 · 3h ago
danger signals1
- dynamic code execution eval()/exec() prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :374
exec(code, namespace) # noqa: S102 - deliberate: local escape hatch with user's own creds
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 55
filesystem 12
- fs prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/catalog.py :13
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/geometry.py :10
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :338
with open(save_path, "w", encoding="utf-8") as fh: - fs prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/session.py :6
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/aoi.py :5
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/classify/analysis.py :11
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/cli.py :5
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/collector.py :11
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/config/loader.py :7
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/config/schema.py :10
from pathlib import Path - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/export/reports.py :45
with open(path, "w", encoding="utf-8") as f: - fs prahaladuk2208-arch-geeflow-253beaf/packages/lulc-engine/src/lulc_engine/labels/loaders.py :15
from pathlib import Path
network 1
- net prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/catalog.py :12
import urllib.request
tool registrations 18
- gee_init prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :64
- catalog_search prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :79
- dataset_info prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :93
- scene_availability prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :104
- build_composite prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :135
- compute_indices prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :182
- thumbnail prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :203
- region_stats prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :228
- export_composite prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :253
- export_tasks prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :280
- sample_polygons prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :288
- execute_code prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :346
- lulc_validate prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :404
- lulc_check prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :432
- lulc_feature_stack prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :440
- lulc_analyze prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :450
- lulc_classify prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :470
- lulc_collector_script prahaladuk2208-arch-geeflow-253beaf/packages/geeflow/src/geeflow/mcp/server.py :496
declared dependencies 5
- mcp@>=1.2
- earthengine-api@>=1.4
- pydantic@>=2.7
- pytest@>=8.0
- ruff@>=0.6