Cybersecurity Ai MCP Server

This MCP server contains a critical security vulnerability: unsafe path manipulation via sys.path.insert(0, os.path.expanduser('~/clawd/meok-labs-engine/shared')) that loads an external auth_middleware module from a user-writable home directory location. This enables arbitrary code execution attacks. Additionally, the server implements custom authentication via an undisclosed external module without verification, and rate limiting is entirely in-memory and bypassable. While the security analysis tools themselves are reasonable, the authentication mechanism and dependency resolution patterns represent serious risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.