Self Healing Infrastructure MCP Server

This MCP server exhibits critical security vulnerabilities that make it unsuitable for production use. The most severe issue is an arbitrary code execution vulnerability through an unsafe sys.path manipulation that loads auth_middleware from a user-controlled directory (~/clawd/meok-labs-engine/shared), combined with a missing or untrusted auth_middleware.py file in the provided code. Additionally, the server makes misleading claims about being read-only while implementing mutation operations, lacks proper input validation, and has weak rate limiting implementation. The external dependency on a shared auth module that is not version-controlled or validated presents a critical supply chain risk. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.