MCP Observatory
2m ago Tracked 59,469 Last 2m ago 24h 2,466
pypi Python analyzed 0.16.0

toolbase

v0.16.0
pypi

The community registry and CLI for AI agent toolkits - discover, share, and serve tools to AI agents over MCP

maintainer
—
licence
MIT
first seen
2026-08-13
last seen
2026-09-15
releases · 30d
1
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution in toolbase
  2. HIGH code analysis flagged dynamic code execution in toolbase
capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals pypi-sdist
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.16.0 · analyzer v33 · 2d ago

danger signals1

  • dynamic code execution unsafe yaml.load() toolbase-0.16.0/toolbase/ingest.py :664 data = yaml.load(f)
code evidence v0.16.0 · pypi-sdist
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 52

filesystem 34

  • fs toolbase-0.16.0/toolbase/_setup_host.py :47 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/_toolkit_host.py :72 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/auth.py :53 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/cli.py :14 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/config.py :16 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/connect/antigravity.py :44 import shutil
  • fs toolbase-0.16.0/toolbase/connect/base.py :13 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/connect/claude_code.py :18 import shutil
  • fs toolbase-0.16.0/toolbase/connect/codex.py :31 import shutil
  • fs toolbase-0.16.0/toolbase/connect/opencode.py :38 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/connect/orchestral.py :38 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/cache.py :38 from pathlib import Path
show 22 more
  • fs toolbase-0.16.0/toolbase/envs/config.py :23 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/discovery.py :22 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/manifest.py :31 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/paths.py :39 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/resolve.py :44 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/envs/schema.py :28 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/ingest.py :19 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/logging/logger.py :38 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/serve/config.py :29 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/serve/loadout_scaffold.py :31 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/serve/loadouts.py :43 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/serve/orchestrator.py :48 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/context.py :38 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/declarative.py :29 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/downloads.py :54 import shutil
  • fs toolbase-0.16.0/toolbase/setup/runner.py :42 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/schema.py :42 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/storage.py :49 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/setup/validate_cache.py :34 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/skills.py :55 import shutil
  • fs toolbase-0.16.0/toolbase/toolkit.py :7 from pathlib import Path
  • fs toolbase-0.16.0/toolbase/validation.py :10 from pathlib import Path

shell / exec 4

  • shell toolbase-0.16.0/toolbase/cli.py :12 import subprocess
  • shell toolbase-0.16.0/toolbase/serve/orchestrator.py :43 import subprocess
  • shell toolbase-0.16.0/toolbase/setup/_rpc.py :268 """First message from subprocess to parent.
  • shell toolbase-0.16.0/toolbase/setup/runner.py :37 import subprocess

network 4

  • net toolbase-0.16.0/toolbase/auth.py :47 import socket
  • net toolbase-0.16.0/toolbase/cli.py :283 import requests
  • net toolbase-0.16.0/toolbase/setup/downloads.py :57 import urllib.parse
  • net toolbase-0.16.0/toolbase/validation.py :59 import requests

declared dependencies 14

  • mcp@>=2
  • click@>=8.0
  • requests@>=2.31
  • pyyaml@>=6.0
  • ruamel.yaml@>=0.18
  • rich@>=13.0
  • pydantic@>=2.0
  • s@EmailStr at runtime; not imported directly.
  • object@has no attribute
  • pytest@>=7.0
  • pytest-cov@>=4.0
  • black@>=23.0
show 2 more
  • ruff@>=0.1.0
  • mkdocs-material@>=9.5