Sentiment Analysis Ai MCP Server

This MCP server has a critical path traversal vulnerability via sys.path manipulation and unsafe imports from an uncontrolled shared directory. The auth_middleware is stored in a user-writable location (~/.meok/), allowing an attacker to replace it with malicious code. Additionally, the server imports from a hardcoded path that depends on external directory structure, creating supply chain risks. While the sentiment analysis tools themselves are benign, the authentication and dependency management patterns are severely flawed and pose real security risks to users. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

7 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.