Grammar Fix Ai MCP Server

This MCP server has a critical external dependency vulnerability that prevents proper security assessment. The code imports from a hardcoded external path (`~/clawd/meok-labs-engine/shared`) containing an undisclosed `auth_middleware` module that is essential for access control, making it impossible to verify authentication and authorization logic. Additionally, the server lacks input validation on user-supplied text parameters, creating potential vulnerabilities. These factors, combined with the opaque authentication mechanism, warrant a high-risk classification. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.