@agentsid/scanner 0.1.0

package/reports/playwright-mcp.json

@@ -0,0 +1,236 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:05:48.319Z",
+  "server": {
+    "name": "Playwright",
+    "version": "0.0.68"
+  },
+  "toolCount": 22,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "B",
+      "validation": "F",
+      "auth": "B",
+      "output": "A"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 2,
+    "MEDIUM": 19,
+    "LOW": 7,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0,
+    "credential_access": 1
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "browser_press_key",
+      "rule": "dangerous_tool_credential_access",
+      "detail": "Tool \"browser_press_key\" classified as credential_access — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_close",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"browser_close\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_close",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_close\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_console_messages",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_console_messages\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_handle_dialog",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_handle_dialog\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_evaluate",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_evaluate\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_file_upload",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_file_upload\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_install",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"browser_install\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_install",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_install\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_press_key",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_press_key\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_type",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_type\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_navigate",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_navigate\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_navigate_back",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"browser_navigate_back\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_navigate_back",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_navigate_back\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_network_requests",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_network_requests\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_run_code",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_run_code\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_take_screenshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_take_screenshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_snapshot",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_snapshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_snapshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_snapshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_click",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_click\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_drag",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_drag\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_hover",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_hover\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_select_option",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_select_option\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "browser_wait_for",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"browser_wait_for\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "browser_wait_for",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"browser_wait_for\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "*",
+      "rule": "large_tool_surface",
+      "detail": "Server exposes 22 tools — large attack surface without per-tool permission controls"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "browser_file_upload",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"browser_file_upload\" may output sensitive file contents without filtering"
+    }
+  ]
+}

package/reports/puppeteer-mcp-server.json

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:02:25.215Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/railway-mcp-server.json

@@ -0,0 +1,194 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:01:19.481Z",
+  "server": {
+    "name": "railway-mcp-server",
+    "title": "Railway MCP Server",
+    "version": "0.1.8"
+  },
+  "toolCount": 14,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "D",
+      "validation": "F",
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 3,
+    "MEDIUM": 17,
+    "LOW": 2,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 5,
+    "mutation": 3,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0,
+    "deployment": 2
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create-environment",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create-environment\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create-project-and-link",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create-project-and-link\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "deploy-template",
+      "rule": "dangerous_tool_deployment",
+      "detail": "Tool \"deploy-template\" classified as deployment — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "deploy",
+      "rule": "dangerous_tool_deployment",
+      "detail": "Tool \"deploy\" classified as deployment — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "set-variables",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"set-variables\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "check-railway-status",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"check-railway-status\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "check-railway-status",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"check-railway-status\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create-environment",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create-environment\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create-project-and-link",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create-project-and-link\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "deploy-template",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"deploy-template\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "deploy",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"deploy\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "generate-domain",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"generate-domain\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get-logs",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get-logs\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "link-environment",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"link-environment\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "link-service",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"link-service\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list-deployments",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list-deployments\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list-projects",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"list-projects\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list-projects",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list-projects\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list-services",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list-services\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list-variables",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"list-variables\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "set-variables",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"set-variables\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/razorpay-blade-mcp.json

@@ -0,0 +1,182 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:51:49.386Z",
+  "server": {
+    "name": "Blade MCP",
+    "version": "1.26.0"
+  },
+  "toolCount": 9,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "injection": "B",
+      "permissions": "C",
+      "validation": "F",
+      "auth": "B",
+      "secrets": "C",
+      "hallucination": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 5,
+    "MEDIUM": 14,
+    "LOW": 1,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 5,
+    "mutation": 2,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0,
+    "deployment": 1
+  },
+  "findings": [
+    {
+      "category": "injection",
+      "severity": "MEDIUM",
+      "tool": "get_blade_changelog",
+      "rule": "excessive_description_length",
+      "detail": "Tool description is 1497 chars — unusually long, may contain hidden instructions"
+    },
+    {
+      "category": "injection",
+      "severity": "MEDIUM",
+      "tool": "publish_lines_of_code_metric",
+      "rule": "excessive_description_length",
+      "detail": "Tool description is 1720 chars — unusually long, may contain hidden instructions"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_blade_cursor_rules",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_blade_cursor_rules\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "create_new_blade_project",
+      "rule": "dangerous_tool_mutation",
+      "detail": "Tool \"create_new_blade_project\" classified as mutation — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "publish_lines_of_code_metric",
+      "rule": "dangerous_tool_deployment",
+      "detail": "Tool \"publish_lines_of_code_metric\" classified as deployment — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_blade_cursor_rules",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_blade_cursor_rules\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_blade_component_docs",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_blade_component_docs\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_blade_pattern_docs",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_blade_pattern_docs\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_blade_general_docs",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_blade_general_docs\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "hi_blade",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"hi_blade\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "hi_blade",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"hi_blade\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "create_new_blade_project",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"create_new_blade_project\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_figma_to_code",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_figma_to_code\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_blade_changelog",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_blade_changelog\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "publish_lines_of_code_metric",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"publish_lines_of_code_metric\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "secrets",
+      "severity": "HIGH",
+      "tool": "get_blade_general_docs",
+      "rule": "potential_secret_exposure",
+      "detail": "Tool \"get_blade_general_docs\" may expose secrets in its output based on description"
+    },
+    {
+      "category": "secrets",
+      "severity": "HIGH",
+      "tool": "get_blade_changelog",
+      "rule": "potential_secret_exposure",
+      "detail": "Tool \"get_blade_changelog\" may expose secrets in its output based on description"
+    },
+    {
+      "category": "hallucination",
+      "severity": "HIGH",
+      "tool": "hi_blade",
+      "rule": "vague_description_over_privilege",
+      "detail": "Tool \"hi_blade\" uses vague action words (use) without specific operations. LLMs will interpret this as the broadest possible action on sensitive resources (user)."
+    },
+    {
+      "category": "hallucination",
+      "severity": "MEDIUM",
+      "tool": "hi_blade",
+      "rule": "missing_scope_boundary",
+      "detail": "Tool \"hi_blade\" references user without specifying scope boundaries. LLM will attempt to access the broadest possible scope."
+    }
+  ]
+}