github Python analyzed 09b8e70

wuhonglei/chat-agent

github

Full-stack AI chat platform with streaming SSE, multi-turn sessions, and PostgreSQL persistence including pgvector. Backend: FastAPI, SQLModel, Alembic, and MCP tools for Context7, weather, web search, and code execution. Frontend: React 19, TypeScript, Ant Design, Redux Toolkit, and Vite+. SMS or WeChat login with JWT. Docker Compose supports loca

maintainer
wuhonglei
licence
MIT
first seen
2026-06-04
last seen
2026-09-09
releases · 30d
0
short id

wuhonglei/chat-agent is an MCP server distributed on github, maintained by wuhonglei, tracked here since June 2026. It has shipped 0 releases and exposes 18 tools. Tools include edit_file, exec, execute_code, get_current_time, get_current_weather, get_weather_alerts, and 12 more. Its composite risk grade is D — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 4 review prompts — dangerous code, exfiltration combo, tool shadowing and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 18 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 18
  • edit_file
  • exec
  • execute_code
  • get_current_time
  • get_current_weather
  • get_weather_alerts
  • get_weather_daily_forecast
  • get_weather_hourly_forecast
  • list_runtimes
  • load_skill
  • present_files
  • read_file
  • search_city
  • search_files
  • web_pages_extract
  • web_search
  • web_site_crawl
  • write_file
release cadence · 90d 0 releases

No releases yet.

recent releases last 0

No releases yet.