🔌 Plug-and-play library to enable agents to call MCP and UTCP tools via code execution.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×2 in universal-tool-calling-protocol/code-mode
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 10781e7 · analyzer v17 · 1h ago
danger signals2
- dynamic code executioneval()/exec()universal-tool-calling-protocol-code-mode-10781e7/python-library/src/utcp_code_mode/code_mode_utcp_client.py:336
exec(compiled_code, context) - dynamic code execution__import__()universal-tool-calling-protocol-code-mode-10781e7/python-library/src/utcp_code_mode/code_mode_utcp_client.py:380
return __import__(name, *args, **kwargs)
evidence-backed
findings quoted directly from the published source artifact — not inferred
declared dependencies 4
- pydantic@>=2.0
- utcp@>=1.1.2
- typing-extensions@>=4.0
- RestrictedPython@>=6.0