Dev tooling, linters & ecosystem auditor for SciTeX packages
C elevated
- capability exposure inferred + 22
- recent drift inferred + 20
- tool safety inferred + 5
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 2m ago · see ecosystem CVEs →
- C · 57 → C · 44
- C · 49 → C · 57
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- medium dangerous code
dynamic exec: eval()/exec(), __import__(), __import__ sink
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 46dce7d · analyzer v28 · 2d ago
skills & prompt files 22
- skill scitex-ai-scitex-dev-46dce7d/docs/MASTER/skills/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/docs/to_claude/skills/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/docs/to_claude/skills/playwright-cli/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/docs/to_claude/skills/pptx/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/docs/to_claude/skills/skill-creator/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/docs/to_claude/skills/xlsx/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/01_ecosystem/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/02_package/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/01_python-api/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/02_cli/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/03_mcp/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/04_skills/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/05_http-api/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/03_interface/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/04_docs/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/05_development/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/09_quality/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/general/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/scientific/06_scitexification/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/scientific/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/_skills/scitex-dev/SKILL.md
- skill scitex-ai-scitex-dev-46dce7d/src/scitex_dev/linter/_skills/scitex-dev-linter/SKILL.md
danger signals9
- dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/docs/to_claude/examples/example-python-project-scitex/scripts/mnist/clf_svm.py :73
scitex.io.save(model, eval(CONFIG.PATH.MNIST.MODEL_SVM)) - dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/docs/to_claude/examples/example-python-project-scitex/scripts/mnist/download.py :41
eval(CONFIG.MNIST.NORMALIZE.MEAN), - dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/docs/to_claude/examples/pip-project-template/tests/custom/test_pip_install.py :48
exec(f"from pip_project_template import {module_name}") - dynamic code execution __import__() scitex-ai-scitex-dev-46dce7d/src/scitex_dev/linter/_packages.py :9
__import__(name) - dynamic code execution __import__() scitex-ai-scitex-dev-46dce7d/src/scitex_dev/versioning/_symbols.py :86
mod = __import__(exp.module, fromlist=["_"]) - dynamic code execution __import__ sink scitex-ai-scitex-dev-46dce7d/tests/develop/test__inert_ini_guard.py :46
env={**__import__("os").environ, "SCITEX_DEV_ALLOW_PARTIAL_RUN": "1"}, - dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/tests/scitex_dev/_cli/audit/_project/test__registry_severity_overrides.py :144
exec(compile(injected, _ASSEMBLY.__file__, "exec"), ns) - dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/tests/scitex_dev/_cli/ecosystem/_cmds/test__install_gate_anchor.py :60
return eval(code, {"Path": Path, "__file__": str(gate_file)}) - dynamic code execution eval()/exec() scitex-ai-scitex-dev-46dce7d/tests/scitex_dev/_release/test_version_fixer.py :155
exec(body, ns)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:scitex-ai/scitex-dev/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of scitex-ai.