@kryptosai/mcp-observatory 1.31.0 → 1.32.0

package/docs/safety-index/artifacts/ui5-mcp-server.md

@@ -0,0 +1,232 @@
+# MCP Observatory Run Report
+
+Generated at 2026-07-09T15:15:05.224Z
+
+## Target and Environment Metadata
+
+- Target: `ui5-mcp-server`
+- Adapter: `local-process`
+- Command: `npx -y @ui5/mcp-server`
+- Server: `UI5 0.2.14`
+- Platform: `darwin 24.0.0`
+- Node: `v25.8.1`
+
+## Executive Summary
+
+**Health Score: 93/100 (A)**
+
+| Dimension | Score | Weight |
+| --- | --- | --- |
+| Protocol Compliance | 100/100 | 30% |
+| Schema Quality | 100/100 | 20% |
+| Security | 100/100 | 20% |
+| Reliability | 67/100 | 20% |
+| Performance | 100/100 | 10% |
+
+| Gate | Total | Pass | Fail | Partial | Unsupported | Flaky | Skipped |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| pass | 9 | 7 | 0 | 0 | 2 | 0 | 0 |
+
+## At a Glance
+
+- Safety verdict: **Needs review** — The server is usable, but caveated checks should be reviewed before agents depend on it.
+- Top risks: No high-priority risks detected.
+- Regression/schema drift: Run `mcp-observatory diff <previous-run.json> <current-run.json>` to classify regressions and schema drift.
+- Failing checks: none
+- Partial or flaky checks: none
+- Skipped checks: none
+- Unsupported checks: prompts, resources
+- Suggested next step: Confirm that unsupported capabilities are intentional for this target: prompts, resources.
+- CI next step: `Add CI: npx @kryptosai/mcp-observatory setup-ci --all --command "npx -y <server-package>"`
+
+## What Was Not Tested
+
+- ℹ️ credential_access: Credential scanning was performed (see security findings)
+- ℹ️ destructive_payloads: Destructive payloads were not attempted (safe-mode only)
+
+## Runtime Profile
+
+### Egress Manifest
+
+The following targets were identified as potentially reachable by this server (confidence: **medium**):
+
+| Target | Protocol | Source | Confidence |
+| --- | --- | --- | --- |
+| Whether to include supplementary information in the output. This includes UI5 API reference and documentation resources. When calling the tool multiple times for the same file or project, refrain from requesting additional context every time. | unknown | description_analysis | medium |
+| run_ui5_linter | unknown | description_analysis | low |
+| get_api_reference | unknown | description_analysis | low |
+| OData V4 service URL parameter; public artifact redacts local URL examples from the upstream tool description. | unknown | description_analysis | medium |
+
+### State Mutations
+
+The following state-modifying operations were identified from tool schemas:
+
+| Resource | Operation | Scope | Source |
+| --- | --- | --- | --- |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | execute | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | write | working_directory | description_analysis |
+| filesystem | execute | working_directory | description_analysis |
+
+_Analyzed at 2026-07-09T15:15:06.521Z_
+
+## Regressions and Recoveries
+
+_Use the `diff` command against another run artifact to classify regressions and recoveries over time._
+
+## Full Capability Status Table
+
+| Focus | Check | Status | Duration (ms) | Message |
+| --- | --- | --- | --- | --- |
+| healthy | attack-sim | pass | 3.89 | Safe attack simulation found no high-risk MCP attack-readiness findings. |
+| healthy | conformance | pass | 11.03 | All 7 conformance checks passed. |
+| healthy | runtime-profile | pass | 0.20 | Detected 4 potential egress target(s) and 23 potential state mutation(s) with low confidence. |
+| healthy | schema-quality | pass | 7.39 | All 10 item(s) have good schema quality. |
+| healthy | security | pass | 3.97 | No security issues detected. |
+| healthy | security-lite | pass | 0.05 | No security issues detected (lightweight scan). |
+| healthy | tools | pass | 6.68 | Advertised capability responded with the minimal expected shape (10 items). |
+| confirm intent | prompts | unsupported | 0.00 | Prompts are not advertised by the target. |
+| confirm intent | resources | unsupported | 0.00 | Resources are not advertised by the target. |
+
+## Evidence Snippets
+
+### attack-sim — pass
+
+Summary: Safe attack simulation found no high-risk MCP attack-readiness findings.
+
+- Endpoint: `attack-sim/safe`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+### conformance — pass
+
+Summary: All 7 conformance checks passed.
+
+- Endpoint: `conformance/check`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `7`
+  - Identifiers: none
+  - Diagnostics: [pass] capabilities-present: Server returned capabilities object., [pass] server-info: Server provided initialization info., [pass] tools-capability-match: tools/list returned 10 tool(s). (+4 more)
+
+### runtime-profile — pass
+
+Summary: Detected 4 potential egress target(s) and 23 potential state mutation(s) with low confidence.
+
+- Endpoint: `runtime-profile/analyze`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `27`
+  - Identifiers: none
+  - Diagnostics: Egress entries: 4, State mutations: 23, Confidence: medium
+
+### schema-quality — pass
+
+Summary: All 10 item(s) have good schema quality.
+
+- Endpoint: `schema-quality/scan`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+### security — pass
+
+Summary: No security issues detected.
+
+- Endpoint: `security/scan`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+### security-lite — pass
+
+Summary: No security issues detected (lightweight scan).
+
+- Endpoint: `security/scan-lite`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+### tools — pass
+
+Summary: Advertised capability responded with the minimal expected shape (10 items).
+
+- Endpoint: `tools/list`
+  - Advertised: `true`
+  - Responded: `true`
+  - Minimal shape present: `true`
+  - Item count: `10`
+  - Identifiers: get_guidelines, run_ui5_linter, get_api_reference, get_project_info, create_ui5_app (+5 more)
+  - Diagnostics: none
+
+### prompts — unsupported
+
+Summary: Prompts are not advertised by the target.
+
+- Endpoint: `prompts/list`
+  - Advertised: `false`
+  - Responded: `false`
+  - Minimal shape present: `false`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+### resources — unsupported
+
+Summary: Resources are not advertised by the target.
+
+- Endpoint: `resources/list | resources/templates/list`
+  - Advertised: `false`
+  - Responded: `false`
+  - Minimal shape present: `false`
+  - Item count: `0`
+  - Identifiers: none
+  - Diagnostics: none
+
+## Reproduction Commands
+
+```bash
+npm run cli -- run --target <path-to-target-config.json>
+npm run cli -- report --run <path-to-run-artifact.json> --format markdown
+```
+
+## Artifact Provenance
+
+- Artifact type: `run`
+- Schema version: `1.0.0`
+- Run ID: `run_2026-07-09T151505224Z_052ab101`
+- Gate: `pass`

package/docs/safety-index/targets.json

@@ -180,6 +180,23 @@
     "whyItMatters": "Exposes 26 tools to agents, including file writes, branch creation, issue/PR creation, and PR merges across any repo a token can reach — high-stakes write access that needs a visible boundary before an agent is trusted with it.",
     "reproductionNotes": "Zero-config package; tool listing succeeds without a real GitHub token, so this check is safe to run in CI. Note: npm currently flags this package as deprecated/no longer supported by the publisher — treat this target as compatibility evidence, not an endorsement of the package's maintenance status."
   },
+  {
+    "id": "ui5-mcp-server",
+    "name": "UI5 MCP Server",
+    "repo": "https://github.com/UI5/mcp-server",
+    "packageName": "@ui5/mcp-server",
+    "category": "Developer Tools",
+    "command": "npx",
+    "args": [
+      "-y",
+      "@ui5/mcp-server"
+    ],
+    "timeoutMs": 60000,
+    "riskClass": "UI5 project scaffolding and analysis",
+    "failureClass": "Framework tooling boundary",
+    "whyItMatters": "UI5 agents can scaffold applications, run UI5-specific analysis, and fetch framework guidance, so teams need reproducible evidence before trusting the tool surface.",
+    "reproductionNotes": "Zero-config public package; tool listing works without private credentials or a project fixture."
+  },
   {
     "id": "opentofu-server",
     "name": "OpenTofu MCP server",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kryptosai/mcp-observatory",
-  "version": "1.31.0",
+  "version": "1.32.0",
   "description": "GitHub-native CI, SARIF, Code Scanning, and security gates for MCP servers before agents depend on them.",
   "mcpName": "io.github.KryptosAI/mcp-observatory",
   "license": "MIT",

package/schemas/run-artifact.schema.json

@@ -32,6 +32,11 @@
     },
     "healthScore": { "$ref": "#/definitions/healthScore" },
     "performanceMetrics": { "$ref": "#/definitions/performanceMetrics" },
+    "runtimeProfile": { "$ref": "#/definitions/runtimeProfile" },
+    "notObserved": {
+      "type": "array",
+      "items": { "$ref": "#/definitions/notObserved" }
+    },
     "fatalError": { "type": "string" }
   },
   "definitions": {
@@ -51,7 +56,8 @@
         "security-lite",
         "attack-sim",
         "conformance",
-        "schema-quality"
+        "schema-quality",
+        "runtime-profile"
       ]
     },
     "evidenceSummary": {
@@ -206,6 +212,55 @@
           "additionalProperties": { "type": "number", "minimum": 0 }
         }
       }
+    },
+    "egressEntry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["target", "protocol", "source", "confidence"],
+      "properties": {
+        "target": { "type": "string" },
+        "protocol": { "type": "string" },
+        "source": { "type": "string" },
+        "confidence": { "type": "string", "enum": ["high", "medium", "low"] }
+      }
+    },
+    "stateMutation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["resource", "operation", "scope", "source"],
+      "properties": {
+        "resource": { "type": "string" },
+        "operation": { "type": "string" },
+        "scope": { "type": "string" },
+        "source": { "type": "string" }
+      }
+    },
+    "runtimeProfile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["analyzedAt", "confidence"],
+      "properties": {
+        "egress": {
+          "type": "array",
+          "items": { "$ref": "#/definitions/egressEntry" }
+        },
+        "stateMutations": {
+          "type": "array",
+          "items": { "$ref": "#/definitions/stateMutation" }
+        },
+        "analyzedAt": { "type": "string" },
+        "confidence": { "type": "string", "enum": ["high", "medium", "low"] }
+      }
+    },
+    "notObserved": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["category", "detail", "severity"],
+      "properties": {
+        "category": { "type": "string" },
+        "detail": { "type": "string" },
+        "severity": { "type": "string", "enum": ["info", "warning"] }
+      }
     }
   }
 }