@agentsid/scanner 0.1.0

package/reports/modelcontextprotocol-server-filesystem.json

@@ -0,0 +1,259 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:39:07.375Z",
+  "server": {
+    "name": "secure-filesystem-server",
+    "version": "0.2.0"
+  },
+  "toolCount": 14,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "injection": "A",
+      "permissions": "B",
+      "validation": "F",
+      "auth": "B",
+      "output": "C",
+      "hallucination": "D"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 3,
+    "MEDIUM": 18,
+    "LOW": 10,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 9,
+    "mutation": 2,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "injection",
+      "severity": "MEDIUM",
+      "tool": "read_media_file",
+      "rule": "encoded_payload",
+      "detail": "Tool description contains potential prompt injection pattern: \"encoded_payload\"",
+      "evidence": "Read an image or audio file. Returns the base64 encoded data and MIME type. Only works within allowed directories."
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "write_file",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"write_file\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_directory",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_directory\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "read_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"read_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "read_text_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"read_text_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "read_media_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"read_media_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "write_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"write_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "edit_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"edit_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_directory",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_directory\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_directory",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list_directory\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_directory_with_sizes",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list_directory_with_sizes\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "directory_tree",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"directory_tree\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "move_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"move_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "search_files",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"search_files\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_file_info",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_file_info\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_allowed_directories",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"list_allowed_directories\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list_allowed_directories",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list_allowed_directories\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "read_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"read_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "read_text_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"read_text_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "read_media_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"read_media_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "read_multiple_files",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"read_multiple_files\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "write_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"write_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "edit_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"edit_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "move_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"move_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "search_files",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"search_files\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "get_file_info",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"get_file_info\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "read_file",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"read_file\" references file without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "HIGH",
+      "tool": "edit_file",
+      "rule": "vague_description_over_privilege",
+      "detail": "Tool \"edit_file\" uses vague action words (change) without specific operations. LLMs will interpret this as the broadest possible action on sensitive resources (file)."
+    },
+    {
+      "category": "hallucination",
+      "severity": "HIGH",
+      "tool": "move_file",
+      "rule": "vague_description_over_privilege",
+      "detail": "Tool \"move_file\" uses vague action words (use) without specific operations. LLMs will interpret this as the broadest possible action on sensitive resources (file)."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "list_directory + list_directory_with_sizes",
+      "rule": "conflicting_tool_descriptions",
+      "detail": "Tools \"list_directory\" and \"list_directory_with_sizes\" have 92% description overlap. LLM may choose between them unpredictably."
+    }
+  ]
+}

package/reports/modelcontextprotocol-server-github.json

@@ -0,0 +1,391 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T20:21:19.580Z",
+  "server": {
+    "name": "github-mcp-server",
+    "version": "0.6.2"
+  },
+  "toolCount": 26,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "F",
+      "validation": "F",
+      "auth": "B",
+      "output": "B",
+      "hallucination": "F"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 2,
+    "MEDIUM": 44,
+    "LOW": 4,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 14,
+    "mutation": 8,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0,
+    "deployment": 1
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_or_update_file",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_or_update_file\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_repository",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_repository\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "push_files",
+      "rule": "dangerous_tool_deployment",
+      "detail": "Tool \"push_files\" classified as deployment — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_issue",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_issue\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_pull_request",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_pull_request\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_branch",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_branch\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "update_issue",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"update_issue\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_pull_request_review",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_pull_request_review\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "update_pull_request_branch",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"update_pull_request_branch\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_or_update_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_or_update_file\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "search_repositories",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"search_repositories\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_repository",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_repository\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_file_contents",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_file_contents\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "push_files",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"push_files\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_issue",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_issue\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_pull_request",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_pull_request\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "fork_repository",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"fork_repository\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_branch",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_branch\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_commits",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list_commits\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_issues",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list_issues\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "update_issue",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"update_issue\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "add_issue_comment",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"add_issue_comment\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "search_code",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"search_code\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "search_issues",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"search_issues\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "search_users",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"search_users\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_issue",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_issue\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_pull_request\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_pull_requests",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list_pull_requests\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_pull_request_review",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_pull_request_review\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "merge_pull_request",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"merge_pull_request\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request_files",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_pull_request_files\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request_status",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_pull_request_status\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "update_pull_request_branch",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"update_pull_request_branch\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request_comments",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_pull_request_comments\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request_reviews",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_pull_request_reviews\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "*",
+      "rule": "large_tool_surface",
+      "detail": "Server exposes 26 tools — large attack surface without per-tool permission controls"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "create_or_update_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"create_or_update_file\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "get_file_contents",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"get_file_contents\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "push_files",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"push_files\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "get_pull_request_files",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"get_pull_request_files\" may output sensitive file contents without filtering"
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "create_or_update_file",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"create_or_update_file\" references file without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "create_repository",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"create_repository\" references account without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "get_file_contents",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"get_file_contents\" references file without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "push_files",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"push_files\" references file without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "fork_repository",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"fork_repository\" references account without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "update_issue",
+      "rule": "vague_description_over_privilege",
+      "detail": "Tool \"update_issue\" uses vague action words (update) without specific operations. LLMs will interpret this as the broadest possible action."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "search_users",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"search_users\" references user without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "get_pull_request_files",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"get_pull_request_files\" references file without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "update_pull_request_branch",
+      "rule": "vague_description_over_privilege",
+      "detail": "Tool \"update_pull_request_branch\" uses vague action words (change, update) without specific operations. LLMs will interpret this as the broadest possible action."
+    }
+  ]
+}