Self-hosted forecasting + prediction service. Five zero-shot time-series foundation models (Chronos-2, TimesFM 2.5, Moirai-2, Toto-1, Sundial) across six forecast types, plus nine supervised tabular ML backends (LightGBM, XGBoost, sklearn family) with calibrated / stacking / diversified meta-learners. Unified REST API + MCP server.
- capability exposure inferred + 28
- tool safety inferred + 12
- trust mitigators mixed − 11
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 23h ago · see ecosystem CVEs →
- C · 41 → B · 29
- C · 49 → C · 41
- C · 57 → C · 49
- C · 49 → C · 57
- C · 37 → C · 49
- C · 49 → C · 37
- A · 0 → C · 49
No known CVEs for this server.
- high dangerous code
dynamic exec: pickle.loads()
analyzed commit 0c60033 · analyzer v33 · 6d ago
skills & prompt files 1
danger signals10
- dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/hist_gbt_be.py :163
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/knn_be.py :97
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/lightgbm_be.py :143
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/logistic_be.py :132
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/mlp_be.py :143
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/naive_bayes_be.py :99
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/random_forest_be.py :119
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/svm_rbf_be.py :113
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/models/xgboost_be.py :165
payload = pickle.loads(blob) - dynamic code execution pickle.loads() psyb0t-docker-predictalot-0c60033/src/predictalot/routers/tabular_meta.py :739
payload = pickle.loads(blob)
[](https://mcpobservatory.com/servers/github:psyb0t/docker-predictalot/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of psyb0t.