Self-healing Python — catches runtime errors, fixes code & dependencies via LLM + MCP
- capability exposure inferred + 35
- tool safety inferred + 5
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 5d ago · see ecosystem CVEs →
- C · 52 → C · 40
- D · 60 → C · 52
- C · 52 → D · 60
No known CVEs for this server.
- medium dangerous code
dynamic exec: eval()/exec(), __import__()
analyzed commit b24431f · analyzer v33 · 3d ago
skills & prompt files 1
- agent-rules semcod-pfix-b24431f/AGENTS.md
danger signals12
- dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/concurrency/main.py :15
exec(open("async_mistakes.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/data/main.py :15
exec(open("numeric_errors.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/deps/main.py :15
exec(open("package_traps.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/edge_cases/main.py :15
exec(open("class_errors.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/encoding/main.py :15
exec(open("codec_errors.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/environment/main.py :15
exec(open("env_var_errors.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/filesystem/main.py :15
exec(open("file_errors.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/imports/main.py :15
exec(open("missing_module.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution eval()/exec() semcod-pfix-b24431f/examples/production/main.py :15
exec(open("api_patterns.py").read(), {"__name__": "__main__", "pfix": pfix}) - dynamic code execution __import__() semcod-pfix-b24431f/src/pfix/_auto_activate.py :70
return builtins.__import__(name, *args, **kwargs) - dynamic code execution __import__() semcod-pfix-b24431f/src/pfix/decorator.py :264
__import__(pkg) - dynamic code execution __import__() semcod-pfix-b24431f/src/pfix/integrations/precommit.py :59
__import__(module)
[](https://mcpobservatory.com/servers/github:semcod/pfix/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of semcod.