Add your description here
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret in 12306-mcp
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.1.7 · analyzer v28 · 3d ago
danger signals1
- committed secret committed .env 12306_mcp-0.1.7/.env :1
env file shipped with populated values
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4
network 2
- net 12306_mcp-0.1.7/src/mcp_12306/main_12306.py :1
import requests - net 12306_mcp-0.1.7/src/mcp_12306/server.py :10
import requests
declared dependencies 5
- mcp@>=1.0.0
- pydantic@>=2.0.0
- tzdata@>=2024.2
- requests@>=2.32.3
- aiohttp@>=3.11.18