Dataprivacy Ai MCP Server

This MCP server has a critical security vulnerability: arbitrary code execution via an unsafe import path that loads external code from the user's home directory. The server imports from `~/clawd/meok-labs-engine/shared` without validation, enabling local privilege escalation or remote code injection. Additionally, the `api_key` parameter is accepted but not properly validated before being passed to an external auth function, and sensitive processing operations accept API keys without enforcing proper authentication on all tools. While the functional code demonstrates legitimate GDPR/privacy compliance features, the authentication architecture and unsafe imports present serious security risks. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.