github Python analyzed 48a0b0a

shigechika/mcp-stdio

Bidirectional stdio ↔ HTTP gateway for MCP servers — connect clients to remote servers or publish local servers

Drift inferred · capture-to-capture

HIGH 2026-08-01 code analysis flagged dynamic code execution in shigechika/mcp-stdio

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 48a0b0a · analyzer v28 · 1d ago

dynamic code execution __import__() shigechika-mcp-stdio-48a0b0a/tests/test_oauth.py :4030 real_open = __import__(

code evidence vv0.28.1 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 29

fs shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/oauth.py :1859 webbrowser.open(auth_url)
fs shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/relay.py :1067 ``resp.read()`` on a stream the server keeps open (the final response
fs shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/server.py :51 from pathlib import Path
fs shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/token_store.py :23 from pathlib import Path

shell shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/server.py :47 import subprocess

net shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/cli.py :11 from urllib.parse import urlparse
net shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/oauth.py :19 from urllib.parse import (
net shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/relay.py :14 import socket
net shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/server.py :46 import socket
net shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/token_store.py :25 from urllib.parse import urlsplit, urlunsplit

secrets shigechika-mcp-stdio-48a0b0a/src/mcp_stdio/cli.py :721 else os.environ.get("MCP_BEARER_TOKEN", "")