Document Comparison Ai MCP Server

This MCP server has critical security vulnerabilities including a suspicious external dependency injection via sys.path manipulation, missing authentication on all tools despite claiming to have auth checks, and potential data exfiltration through an undocumented external module. The `auth_middleware` module is imported from an absolute path outside the project (`~/clawd/meok-labs-engine/shared`), creating a supply chain risk and making the authentication mechanism unverifiable. All authentication checks appear to be ineffective due to implementation details that cannot be audited. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.