Clinical Trials Ai MCP Server

This MCP server has critical security vulnerabilities centered on unsafe path manipulation and external dependency trust issues. The server imports from a hardcoded local path (`~/clawd/meok-labs-engine/shared`) that is not distributed with the package, creating a dependency on an external auth system that cannot be verified. Additionally, the `sys.path.insert(0, ...)` pattern used in multiple files is a known code injection vector. While the server's functional logic is sound, these architectural issues create pathways for privilege escalation and supply chain attacks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.