npm - @agentsid/scanner - Versions diffs - 0.1.0 - Mend

@agentsid/scanner 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (116) hide show

package/README.md +205 -0
package/action/action.yml +42 -0
package/action/index.mjs +179 -0
package/docs/state-of-agent-security-2026.md +377 -0
package/examples/security-scan.yml +57 -0
package/package.json +37 -0
package/reports/aashari-mcp-server-atlassian-confluence.json +110 -0
package/reports/aashari-mcp-server-atlassian-jira.json +138 -0
package/reports/aashari-mcp-server-aws-sso.json +122 -0
package/reports/agentdeskai-browser-tools-mcp.json +361 -0
package/reports/ahmetkca-mcp-server-postgres.json +43 -0
package/reports/aiondadotcom-mcp-ssh.json +166 -0
package/reports/apify-actors-mcp-server.json +43 -0
package/reports/azure-mcp.json +43 -0
package/reports/boilerplate-mcp-tool.json +43 -0
package/reports/browserstack-mcp-server.json +43 -0
package/reports/canvas-mcp-server.json +43 -0
package/reports/canvas-mcp-tool.json +43 -0
package/reports/chrome-devtools-mcp.json +300 -0
package/reports/chrome-local-mcp.json +222 -0
package/reports/claude-flow-mcp.json +43 -0
package/reports/cloudflare-mcp-server.json +43 -0
package/reports/code-canvas-server.json +43 -0
package/reports/cognitionai-metabase-mcp-server.json +43 -0
package/reports/composio-mcp.json +43 -0
package/reports/contentful-mcp-server.json +43 -0
package/reports/dbhub.json +43 -0
package/reports/desktop-commander.json +43 -0
package/reports/dynatrace-oss-dynatrace-mcp-server.json +43 -0
package/reports/e2b-mcp-server.json +67 -0
package/reports/eslint-mcp.json +51 -0
package/reports/european-parliament-mcp-server.json +1467 -0
package/reports/exa-mcp-server.json +74 -0
package/reports/executeautomation-playwright-mcp-server.json +418 -0
package/reports/fast-kit-spec-kit.json +43 -0
package/reports/felores-airtable-mcp-server.json +43 -0
package/reports/figma-mcp.json +103 -0
package/reports/forestadmin-mcp-server.json +43 -0
package/reports/fullrun-mcp.json +43 -0
package/reports/gemini-mcp-tool.json +43 -0
package/reports/gitlab-mcp-agent-server.json +186 -0
package/reports/grackle-ai-mcp.json +43 -0
package/reports/heroku-mcp-server.json +333 -0
package/reports/hisma-server-puppeteer.json +93 -0
package/reports/hubspot-mcp-server.json +43 -0
package/reports/hyper-mcp-shell.json +59 -0
package/reports/iflow-mcp-server-github.json +327 -0
package/reports/jpisnice-shadcn-ui-mcp-server.json +149 -0
package/reports/jsonresume-mcp.json +43 -0
package/reports/mapbox-mcp-server.json +43 -0
package/reports/mcp-framework.json +43 -0
package/reports/mcp-from-openapi.json +43 -0
package/reports/mcp-handler.json +43 -0
package/reports/mcp-proxy.json +43 -0
package/reports/mcp-server-docker.json +59 -0
package/reports/mcp-server-github-gist.json +108 -0
package/reports/mcp-server-google-calendar.json +43 -0
package/reports/mcp-server-jira-cloud.json +43 -0
package/reports/mcp-server-kubernetes.json +43 -0
package/reports/mcp-server-slack.json +411 -0
package/reports/mcp-server-sqlite-npx.json +43 -0
package/reports/mcp-server.json +43 -0
package/reports/mcp-starter.json +59 -0
package/reports/mcp-tool-lint.json +43 -0
package/reports/mcporter.json +43 -0
package/reports/mcptoolshop-mcp-tool-registry.json +43 -0
package/reports/microsoft-devbox-mcp.json +43 -0
package/reports/mobilenext-mobile-mcp.json +214 -0
package/reports/modelcontextprotocol-server-brave-search.json +43 -0
package/reports/modelcontextprotocol-server-everything.json +165 -0
package/reports/modelcontextprotocol-server-fetch.json +43 -0
package/reports/modelcontextprotocol-server-filesystem.json +259 -0
package/reports/modelcontextprotocol-server-github.json +391 -0
package/reports/modelcontextprotocol-server-memory.json +117 -0
package/reports/modelcontextprotocol-server-postgres.json +43 -0
package/reports/modelcontextprotocol-server-puppeteer.json +101 -0
package/reports/modelcontextprotocol-server-sequential-thinking.json +67 -0
package/reports/mongodb-mcp-server.json +43 -0
package/reports/mseep-linear-mcp-server.json +43 -0
package/reports/mseep-mcp-server-sqlite-npx.json +43 -0
package/reports/n8n-mcp.json +123 -0
package/reports/notepost-mcp.json +43 -0
package/reports/notionhq-notion-mcp-server.json +220 -0
package/reports/nx-mcp.json +59 -0
package/reports/obsidian-mcp-server.json +43 -0
package/reports/opengraph-io-mcp.json +130 -0
package/reports/payloadcms-plugin-mcp.json +43 -0
package/reports/peac-mappings-mcp.json +43 -0
package/reports/playwright-mcp.json +236 -0
package/reports/puppeteer-mcp-server.json +43 -0
package/reports/railway-mcp-server.json +194 -0
package/reports/razorpay-blade-mcp.json +182 -0
package/reports/rekog-mcp-nest.json +43 -0
package/reports/remotion-mcp.json +51 -0
package/reports/rollbar-mcp-server.json +43 -0
package/reports/sap-ux-fiori-mcp-server.json +80 -0
package/reports/sentry-mcp-server.json +43 -0
package/reports/server-filesystem.json +43 -0
package/reports/server-memory.json +43 -0
package/reports/shortcut-mcp.json +43 -0
package/reports/supabase-mcp-server-supabase.json +43 -0
package/reports/tavily-mcp.json +79 -0
package/reports/thelord-mcp-server-docker-npx.json +43 -0
package/reports/tyk-technologies-api-to-mcp.json +43 -0
package/reports/tyk-technologies-tyk-dashboard-mcp.json +43 -0
package/reports/ui5-mcp-server.json +157 -0
package/reports/upstash-context7-mcp.json +82 -0
package/reports/vantasdk-vanta-mcp-server.json +43 -0
package/reports/winor30-mcp-server-datadog.json +43 -0
package/reports/wonderwhy-er-desktop-commander.json +43 -0
package/reports/xzxzzx-bilibili-mcp.json +58 -0
package/src/grader.mjs +66 -0
package/src/index.mjs +108 -0
package/src/reporter.mjs +158 -0
package/src/rules.mjs +363 -0
package/src/scanner.mjs +208 -0

package/reports/chrome-devtools-mcp.json ADDED Viewed

@@ -0,0 +1,300 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:03:07.569Z",
+  "server": {
+    "name": "chrome_devtools",
+    "title": "Chrome DevTools MCP server",
+    "version": "0.20.3"
+  },
+  "toolCount": 29,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "D",
+      "validation": "F",
+      "auth": "B",
+      "output": "A"
+    }
+  },
+  "summary": {
+    "CRITICAL": 1,
+    "HIGH": 2,
+    "MEDIUM": 22,
+    "LOW": 12,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 5,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 1,
+    "privilege": 0,
+    "financial": 0,
+    "credential_access": 1
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "CRITICAL",
+      "tool": "evaluate_script",
+      "rule": "dangerous_tool_execution",
+      "detail": "Tool \"evaluate_script\" classified as execution — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "press_key",
+      "rule": "dangerous_tool_credential_access",
+      "detail": "Tool \"press_key\" classified as credential_access — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "click",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"click\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "drag",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"drag\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "emulate",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"emulate\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "emulate",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"emulate\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "evaluate_script",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"evaluate_script\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "fill",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"fill\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "get_network_request",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"get_network_request\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_network_request",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_network_request\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "handle_dialog",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"handle_dialog\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "hover",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"hover\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "lighthouse_audit",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"lighthouse_audit\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "lighthouse_audit",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"lighthouse_audit\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list_console_messages",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list_console_messages\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list_network_requests",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list_network_requests\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_pages",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"list_pages\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list_pages",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list_pages\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "navigate_page",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"navigate_page\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "navigate_page",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"navigate_page\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "new_page",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"new_page\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "performance_analyze_insight",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"performance_analyze_insight\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "performance_start_trace",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"performance_start_trace\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "performance_start_trace",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"performance_start_trace\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "performance_stop_trace",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"performance_stop_trace\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "performance_stop_trace",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"performance_stop_trace\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "press_key",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"press_key\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "take_memory_snapshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"take_memory_snapshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "take_screenshot",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"take_screenshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "take_screenshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"take_screenshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "take_snapshot",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"take_snapshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "take_snapshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"take_snapshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "type_text",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"type_text\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "upload_file",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"upload_file\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "*",
+      "rule": "large_tool_surface",
+      "detail": "Server exposes 29 tools — large attack surface without per-tool permission controls"
+    },
+    {
+      "category": "output",
+      "severity": "LOW",
+      "tool": "upload_file",
+      "rule": "unfiltered_file_output",
+      "detail": "File reading tool \"upload_file\" may output sensitive file contents without filtering"
+    }
+  ]
+}

package/reports/chrome-local-mcp.json ADDED Viewed

@@ -0,0 +1,222 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T18:07:47.073Z",
+  "server": {
+    "name": "chrome-local",
+    "version": "1.0.0"
+  },
+  "toolCount": 25,
+  "grade": {
+    "overall": "F",
+    "score": 0,
+    "categories": {
+      "permissions": "D",
+      "validation": "D",
+      "auth": "B",
+      "secrets": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 1,
+    "HIGH": 3,
+    "MEDIUM": 18,
+    "LOW": 4,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 5,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 1,
+    "privilege": 0,
+    "financial": 0,
+    "credential_access": 1
+  },
+  "findings": [
+    {
+      "category": "permissions",
+      "severity": "HIGH",
+      "tool": "press_key",
+      "rule": "dangerous_tool_credential_access",
+      "detail": "Tool \"press_key\" classified as credential_access — requires permission controls"
+    },
+    {
+      "category": "permissions",
+      "severity": "CRITICAL",
+      "tool": "eval",
+      "rule": "dangerous_tool_execution",
+      "detail": "Tool \"eval\" classified as execution — requires permission controls"
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "launch",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"launch\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "close_browser",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"close_browser\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "close_browser",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"close_browser\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "new_tab",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"new_tab\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "new_tab",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"new_tab\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "list_pages",
+      "rule": "empty_schema",
+      "detail": "Schema defined but no properties specified in tool \"list_pages\""
+    },
+    {
+      "category": "validation",
+      "severity": "LOW",
+      "tool": "list_pages",
+      "rule": "no_required_fields",
+      "detail": "No required fields — all input is optional in tool \"list_pages\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "navigate",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"navigate\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "click_ref",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"click_ref\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "type_ref",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"type_ref\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "click",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"click\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "type",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"type\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "press_key",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"press_key\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "select",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"select\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "wait_for",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"wait_for\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_text",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_text\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "eval",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"eval\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "screenshot",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"screenshot\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "ocr",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"ocr\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "fill_form",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"fill_form\""
+    },
+    {
+      "category": "validation",
+      "severity": "MEDIUM",
+      "tool": "get_network_requests",
+      "rule": "unbounded_strings",
+      "detail": "String parameters without length limits or pattern validation in tool \"get_network_requests\""
+    },
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    },
+    {
+      "category": "permissions",
+      "severity": "MEDIUM",
+      "tool": "*",
+      "rule": "large_tool_surface",
+      "detail": "Server exposes 25 tools — large attack surface without per-tool permission controls"
+    },
+    {
+      "category": "secrets",
+      "severity": "HIGH",
+      "tool": "snapshot",
+      "rule": "potential_secret_exposure",
+      "detail": "Tool \"snapshot\" may expose secrets in its output based on description"
+    }
+  ]
+}

package/reports/claude-flow-mcp.json ADDED Viewed

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:51:44.364Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/cloudflare-mcp-server.json ADDED Viewed

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T20:22:36.102Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}

package/reports/code-canvas-server.json ADDED Viewed

@@ -0,0 +1,43 @@
+{
+  "scanner": {
+    "name": "agentsid-scanner",
+    "version": "0.1.0"
+  },
+  "scannedAt": "2026-03-29T19:53:39.721Z",
+  "server": {
+    "name": "unknown",
+    "version": "?"
+  },
+  "toolCount": 0,
+  "grade": {
+    "overall": "B",
+    "score": 85,
+    "categories": {
+      "auth": "B"
+    }
+  },
+  "summary": {
+    "CRITICAL": 0,
+    "HIGH": 1,
+    "MEDIUM": 0,
+    "LOW": 0,
+    "INFO": 0
+  },
+  "riskProfile": {
+    "read_only": 0,
+    "mutation": 0,
+    "destructive": 0,
+    "execution": 0,
+    "privilege": 0,
+    "financial": 0
+  },
+  "findings": [
+    {
+      "category": "auth",
+      "severity": "HIGH",
+      "tool": "*",
+      "rule": "no_auth_tools",
+      "detail": "Server exposes no authentication-related tools — may accept unauthenticated connections"
+    }
+  ]
+}