Is agentaudit safe to use?

agentaudit has a security risk score of 100/100 (CRITICAL risk). Our security analysis detected 422 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of agentaudit?

Based on our automated security analysis, agentaudit presents critical risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "agentaudit" on MCP Registry Safe to Install?

Name: agentaudit
Availability: InStock
Author: latentspace

latentspace · mcp · v3.14.0

Security scanner for AI agent packages — CLI + MCP server

Risk Assessment

Analyzed

100

out of 100

CRITICAL

422 security findings detected across all analyzers

MCP server analyzed for tool poisoning, prompt injection, and data exfiltration

Severity Breakdown

Critical

High

286

Medium

Low

Info

Finding Categories

Malware Signatures

Secrets

Network

216

IoC Indicators

YARA Rules Matched

13 rules(47 hits)

postinstall crypto operations postinstall file download postinstall registry modification credential env files postinstall system command postinstall obfuscation UsingCommandLineArguments UsingShellInterpreterWhenExecutingOSCommands postinstall file manipulation postinstall network communication NoUseEval DebuggerStatementsShouldNotBeUsed postinstall persistence mechanism

MCP Server Analysis

MCP servers expose tools and resources to AI assistants. Unlike browser extensions, they run as standalone processes with direct system access. Tool definitions are analyzed for prompt injection, data exfiltration, and tool poisoning patterns.

About This Extension

Security scanner for AI agent packages — CLI + MCP server

Detailed Findings

196 total

YARA Rule Matches

13 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

Domains

138

Strings

216

All Indicators · 216

Domain

detected Domain: attacker.com

XIOC detected Domain: attacker.com

extracted_from_files

Domain

detected Domain: mcprefs.map

XIOC detected Domain: mcprefs.map

extracted_from_files

Domain

detected Domain: www.gnu.org

XIOC detected Domain: www.gnu.org

extracted_from_files

URL

detected URL: https://evil.example.com/payload

XIOC detected URL: https://evil.example.com/payload

extracted_from_files

URL

detected URL: https://pypi.org/project/$

XIOC detected URL: https://pypi.org/project/$

extracted_from_files

URL

detected URL: https://github.com/owner/repo)',

XIOC detected URL: https://github.com/owner/repo)',

extracted_from_files

URL

detected URL: https://github.com/agentaudit-dev/agentaudit-cli.git

XIOC detected URL: https://github.com/agentaudit-dev/agentaudit-cli.git

extracted_from_files

URL

detected URL: https://agentaudit.dev

XIOC detected URL: https://agentaudit.dev

extracted_from_files

URL

detected URL: https://agentaudit.dev/packages/package-slug

XIOC detected URL: https://agentaudit.dev/packages/package-slug

extracted_from_files

URL

detected URL: https://agentaudit.dev/packages/

XIOC detected URL: https://agentaudit.dev/packages/

extracted_from_files

URL

detected URL: https://evil.example.com/collect

XIOC detected URL: https://evil.example.com/collect

extracted_from_files

URL

detected URL: https://github.com/c/d

XIOC detected URL: https://github.com/c/d

extracted_from_files

URL

detected URL: https://github.com/owner/repo

XIOC detected URL: https://github.com/owner/repo

extracted_from_files

URL

detected URL: https://agentaudit.dev$

XIOC detected URL: https://agentaudit.dev$

extracted_from_files

URL

detected URL: https://github.com/owner/repo$

XIOC detected URL: https://github.com/owner/repo$

extracted_from_files

URL

detected URL: https://registry.npmjs.org/$

XIOC detected URL: https://registry.npmjs.org/$

extracted_from_files

URL

detected URL: https://www.npmjs.com/package/$

XIOC detected URL: https://www.npmjs.com/package/$

extracted_from_files

URL

detected URL: https://pypi.org/pypi/$

XIOC detected URL: https://pypi.org/pypi/$

extracted_from_files

URL

detected URL: https://github.com/search?q=$

XIOC detected URL: https://github.com/search?q=$

extracted_from_files

URL

detected URL: https://cwe.mitre.org/data/definitions/$

XIOC detected URL: https://cwe.mitre.org/data/definitions/$

extracted_from_files

URL

detected URL: https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json',

XIOC detected URL: https://docs.oasis-open.org/sarif/sarif/v2.1.0/errata01/os/schemas/sarif-schema-2.1.0.json',

extracted_from_files

URL

detected URL: https://agentaudit.dev',

XIOC detected URL: https://agentaudit.dev',

extracted_from_files

URL

detected URL: https://github.com/a/b

XIOC detected URL: https://github.com/a/b

extracted_from_files

URL

detected URL: https://api.github.com/search/repositories?q=$

XIOC detected URL: https://api.github.com/search/repositories?q=$

extracted_from_files

URL

detected URL: https://github.com');

XIOC detected URL: https://github.com');

extracted_from_files

URL

detected URL: https://api.groq.com/openai/v1/chat/completions'

XIOC detected URL: https://api.groq.com/openai/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.x.ai/v1/chat/completions'

XIOC detected URL: https://api.x.ai/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.together.xyz/v1/chat/completions'

XIOC detected URL: https://api.together.xyz/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.fireworks.ai/inference/v1/chat/completions'

XIOC detected URL: https://api.fireworks.ai/inference/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.cerebras.ai/v1/chat/completions'

XIOC detected URL: https://api.cerebras.ai/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.z.ai/api/paas/v4/chat/completions'

XIOC detected URL: https://api.z.ai/api/paas/v4/chat/completions'

extracted_from_files

URL

detected URL: https://openrouter.ai/api/v1/chat/completions'

XIOC detected URL: https://openrouter.ai/api/v1/chat/completions'

extracted_from_files

URL

detected URL: https://agentaudit.dev/leaderboard)

XIOC detected URL: https://agentaudit.dev/leaderboard)

extracted_from_files

URL

detected URL: https://agentaudit.dev';

XIOC detected URL: https://agentaudit.dev';

extracted_from_files

URL

detected URL: https://api.anthropic.com/v1/messages'

XIOC detected URL: https://api.anthropic.com/v1/messages'

extracted_from_files

URL

detected URL: https://generativelanguage.googleapis.com/v1beta/models'

XIOC detected URL: https://generativelanguage.googleapis.com/v1beta/models'

extracted_from_files

URL

detected URL: https://api.openai.com/v1/chat/completions'

XIOC detected URL: https://api.openai.com/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.deepseek.com/v1/chat/completions'

XIOC detected URL: https://api.deepseek.com/v1/chat/completions'

extracted_from_files

URL

detected URL: https://api.mistral.ai/v1/chat/completions'

XIOC detected URL: https://api.mistral.ai/v1/chat/completions'

extracted_from_files

URL

detected URL: https://github.com/org/mcp-server

XIOC detected URL: https://github.com/org/mcp-server

extracted_from_files

URL

detected URL: https://no-color.org))

XIOC detected URL: https://no-color.org))

extracted_from_files

URL

detected URL: https://github.com/agentaudit-dev/agentaudit-skill)

XIOC detected URL: https://github.com/agentaudit-dev/agentaudit-skill)

extracted_from_files

URL

detected URL: https://github.com/agentaudit-dev/agentaudit-github-action)

XIOC detected URL: https://github.com/agentaudit-dev/agentaudit-github-action)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Broad_Permissions-FF6F00?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Broad_Permissions-FF6F00?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Crontab_Mod-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Crontab_Mod-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Shell_RC_Inject-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Shell_RC_Inject-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Git_Hook_Abuse-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Git_Hook_Abuse-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Zero--Width_Chars-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Zero--Width_Chars-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Base64_Exec-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Base64_Exec-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-ANSI_Escape-455A64?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-ANSI_Escape-455A64?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Capability_Escalation-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Capability_Escalation-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Context_Pollution-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Context_Pollution-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Hidden_Instructions-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Hidden_Instructions-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Tool_Poisoning-FF6F00?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Tool_Poisoning-FF6F00?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Desc_Injection-FF6F00?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Desc_Injection-FF6F00?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Resource_Traversal-FF6F00?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Resource_Traversal-FF6F00?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Unpinned_npx-FF6F00?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Unpinned_npx-FF6F00?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Data_Exfiltration-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Data_Exfiltration-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-SQL_Injection-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-SQL_Injection-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Path_Traversal-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Path_Traversal-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Unsafe_Deserialization-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Unsafe_Deserialization-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Prompt_Injection-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Prompt_Injection-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Jailbreak-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Jailbreak-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Agent_Impersonation-7B1FA2?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Agent_Impersonation-7B1FA2?style=flat-square)

extracted_from_files

URL

detected URL: https://agentaudit.dev/packages/supabase-mcp

XIOC detected URL: https://agentaudit.dev/packages/supabase-mcp

extracted_from_files

URL

detected URL: https://github.com/nichochar/browser-tools-mcp

XIOC detected URL: https://github.com/nichochar/browser-tools-mcp

extracted_from_files

URL

detected URL: https://agentaudit.dev/packages/filesystem

XIOC detected URL: https://agentaudit.dev/packages/filesystem

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Command_Injection-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Command_Injection-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/-Credential_Theft-E53935?style=flat-square)

XIOC detected URL: https://img.shields.io/badge/-Credential_Theft-E53935?style=flat-square)

extracted_from_files

URL

detected URL: https://agentaudit.dev/terms.

XIOC detected URL: https://agentaudit.dev/terms.

extracted_from_files

URL

detected URL: https://www.agentaudit.dev/banner-chameleon.png

XIOC detected URL: https://www.agentaudit.dev/banner-chameleon.png

extracted_from_files

URL

detected URL: https://www.agentaudit.dev/api/badge/agentaudit-mcp)](https://www.agentaudit.dev/packages/agentaudit-mcp)

XIOC detected URL: https://www.agentaudit.dev/api/badge/agentaudit-mcp)](https://www.agentaudit.dev/packages/agentaudit-mcp)

extracted_from_files

URL

detected URL: https://img.shields.io/npm/v/agentaudit?style=for-the-badge&color=CB3837&logo=npm)](https://www.npmjs.com/package/agentaudit)

XIOC detected URL: https://img.shields.io/npm/v/agentaudit?style=for-the-badge&color=CB3837&logo=npm)](https://www.npmjs.com/package/agentaudit)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/Trust_Registry-Live-00C853?style=for-the-badge)](https://agentaudit.dev)

XIOC detected URL: https://img.shields.io/badge/Trust_Registry-Live-00C853?style=for-the-badge)](https://agentaudit.dev)

extracted_from_files

URL

detected URL: https://img.shields.io/badge/License-AGPL_3.0-F9A825?style=for-the-badge)](LICENSE)

XIOC detected URL: https://img.shields.io/badge/License-AGPL_3.0-F9A825?style=for-the-badge)](LICENSE)

extracted_from_files

URL

detected URL: https://agentaudit.dev)

XIOC detected URL: https://agentaudit.dev)

extracted_from_files

Domain

detected Domain: gp.id

XIOC detected Domain: gp.id

extracted_from_files

Domain

detected Domain: found.map

XIOC detected Domain: found.map

extracted_from_files

Domain

detected Domain: schema.properties

XIOC detected Domain: schema.properties

extracted_from_files

Domain

detected Domain: inputschema.properties

XIOC detected Domain: inputschema.properties

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://www.gnu.org/licenses/

XIOC detected URL: https://www.gnu.org/licenses/

extracted_from_files

URL

detected URL: https://github.com/starbuck100/agentaudit-web/issues

XIOC detected URL: https://github.com/starbuck100/agentaudit-web/issues

extracted_from_files

Domain

detected Domain: input.tools

XIOC detected Domain: input.tools

extracted_from_files

Domain

detected Domain: rule.id

XIOC detected Domain: rule.id

extracted_from_files

Domain

detected Domain: subfindings.map

XIOC detected Domain: subfindings.map

extracted_from_files

Domain

detected Domain: nestedfindings.map

XIOC detected Domain: nestedfindings.map

extracted_from_files

Domain

detected Domain: tool.name

XIOC detected Domain: tool.name

extracted_from_files

Domain

detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain

detected Domain: info.name

XIOC detected Domain: info.name

extracted_from_files

Domain

detected Domain: webbrowser.open

XIOC detected Domain: webbrowser.open

extracted_from_files

Domain

detected Domain: osint-graph.py

XIOC detected Domain: osint-graph.py

extracted_from_files

Domain

detected Domain: evil.example.com

XIOC detected Domain: evil.example.com

extracted_from_files

Domain

detected Domain: summary.tools

XIOC detected Domain: summary.tools

extracted_from_files

Domain

detected Domain: summary.total

XIOC detected Domain: summary.total

extracted_from_files

Domain

detected Domain: summary.by

XIOC detected Domain: summary.by

extracted_from_files

Domain

detected Domain: result.summary.total

XIOC detected Domain: result.summary.total

extracted_from_files

Domain

detected Domain: result.summary.by

XIOC detected Domain: result.summary.by

extracted_from_files

Domain

detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain

detected Domain: process.env.ci

XIOC detected Domain: process.env.ci

extracted_from_files

URL

detected URL: https://github.com/agentaudit-dev/agentaudit-cli)

XIOC detected URL: https://github.com/agentaudit-dev/agentaudit-cli)

extracted_from_files

URL

detected URL: https://github.com/agentaudit-dev/agentaudit-cli/issues)

XIOC detected URL: https://github.com/agentaudit-dev/agentaudit-cli/issues)

extracted_from_files

Domain

detected Domain: subprocess.run

XIOC detected Domain: subprocess.run

extracted_from_files

Domain

detected Domain: r.findings.map

XIOC detected Domain: r.findings.map

extracted_from_files

Domain

detected Domain: cli.py

XIOC detected Domain: cli.py

extracted_from_files

Domain

detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain

detected Domain: c.servers.map

XIOC detected Domain: c.servers.map

extracted_from_files

Domain

detected Domain: srv.name

XIOC detected Domain: srv.name

extracted_from_files

Domain

detected Domain: data.is

XIOC detected Domain: data.is

extracted_from_files

Domain

detected Domain: result.summary.tools

XIOC detected Domain: result.summary.tools

extracted_from_files

Domain

detected Domain: resolved.name

XIOC detected Domain: resolved.name

extracted_from_files

Domain

detected Domain: p.name

XIOC detected Domain: p.name

extracted_from_files

Domain

detected Domain: k.name

XIOC detected Domain: k.name

extracted_from_files

Domain

detected Domain: agentres.total

XIOC detected Domain: agentres.total

extracted_from_files

Domain

detected Domain: skills.map

XIOC detected Domain: skills.map

extracted_from_files

Domain

detected Domain: s.validation.info.name

XIOC detected Domain: s.validation.info.name

extracted_from_files

Domain

detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain

detected Domain: entry.total

XIOC detected Domain: entry.total

extracted_from_files

Domain

detected Domain: overview.total

XIOC detected Domain: overview.total

extracted_from_files

Domain

detected Domain: m.total

XIOC detected Domain: m.total

extracted_from_files

Domain

detected Domain: benchmark.global

XIOC detected Domain: benchmark.global

extracted_from_files

Domain

detected Domain: agentdata.total

XIOC detected Domain: agentdata.total

extracted_from_files

Domain

detected Domain: data.report

XIOC detected Domain: data.report

extracted_from_files

Domain

detected Domain: data.reviews

XIOC detected Domain: data.reviews

extracted_from_files

Domain

detected Domain: reader.read

XIOC detected Domain: reader.read

extracted_from_files

Domain

detected Domain: data.trust

XIOC detected Domain: data.trust

extracted_from_files

Domain

detected Domain: icons.info

XIOC detected Domain: icons.info

extracted_from_files

Domain

detected Domain: agent.total

XIOC detected Domain: agent.total

extracted_from_files

Domain

detected Domain: stats.total

XIOC detected Domain: stats.total

extracted_from_files

Domain

detected Domain: stats.safe

XIOC detected Domain: stats.safe

extracted_from_files

Domain

detected Domain: localstats.total

XIOC detected Domain: localstats.total

extracted_from_files

Domain

detected Domain: verdict.is

XIOC detected Domain: verdict.is

extracted_from_files

Domain

detected Domain: resolvedmodels.map

XIOC detected Domain: resolvedmodels.map

extracted_from_files

Domain

detected Domain: reports.map

XIOC detected Domain: reports.map

extracted_from_files

Domain

detected Domain: r.report

XIOC detected Domain: r.report

extracted_from_files

Domain

detected Domain: activellm.name

XIOC detected Domain: activellm.name

extracted_from_files

Domain

detected Domain: llmresult.report

XIOC detected Domain: llmresult.report

extracted_from_files

Domain

detected Domain: verifierconfig.name

XIOC detected Domain: verifierconfig.name

extracted_from_files

Domain

detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain

detected Domain: err.name

XIOC detected Domain: err.name

extracted_from_files

Domain

detected Domain: yaml.safe

XIOC detected Domain: yaml.safe

extracted_from_files

Domain

detected Domain: finding.by

XIOC detected Domain: finding.by

extracted_from_files

Domain

detected Domain: f.by

XIOC detected Domain: f.by

extracted_from_files

Domain

detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain

detected Domain: finding.is

XIOC detected Domain: finding.is

extracted_from_files

Domain

detected Domain: target.name

XIOC detected Domain: target.name

extracted_from_files

Domain

detected Domain: auditcandidates.map

XIOC detected Domain: auditcandidates.map

extracted_from_files

Domain

detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain

detected Domain: audit-prompt.md

XIOC detected Domain: audit-prompt.md

extracted_from_files

Domain

detected Domain: verification-prompt.md

XIOC detected Domain: verification-prompt.md

extracted_from_files

Domain

detected Domain: z.ai

XIOC detected Domain: z.ai

extracted_from_files

Domain

detected Domain: llmconfig.name

XIOC detected Domain: llmconfig.name

extracted_from_files

Domain

detected Domain: pkg.name

XIOC detected Domain: pkg.name

extracted_from_files

Domain

detected Domain: mcp.supabase.com

XIOC detected Domain: mcp.supabase.com

extracted_from_files

Domain

detected Domain: data.info

XIOC detected Domain: data.info

extracted_from_files

Domain

detected Domain: config.name

XIOC detected Domain: config.name

extracted_from_files

Domain

detected Domain: server.name

XIOC detected Domain: server.name

extracted_from_files

Domain

detected Domain: npmjs.com

XIOC detected Domain: npmjs.com

extracted_from_files

Domain

detected Domain: info.mcpservers.map

XIOC detected Domain: info.mcpservers.map

extracted_from_files

Domain

detected Domain: line.search

XIOC detected Domain: line.search

extracted_from_files

Domain

detected Domain: meta.name

XIOC detected Domain: meta.name

extracted_from_files

Domain

detected Domain: unknown-domain.com

XIOC detected Domain: unknown-domain.com

extracted_from_files

Domain

detected Domain: tools.map

XIOC detected Domain: tools.map

extracted_from_files

Domain

detected Domain: dir.name

XIOC detected Domain: dir.name

extracted_from_files

Domain

detected Domain: main.py

XIOC detected Domain: main.py

extracted_from_files

Domain

detected Domain: server.py

XIOC detected Domain: server.py

extracted_from_files

Domain

detected Domain: app.py

XIOC detected Domain: app.py

extracted_from_files

Domain

detected Domain: info.tools

XIOC detected Domain: info.tools

extracted_from_files

Domain

detected Domain: setup.py

XIOC detected Domain: setup.py

extracted_from_files

Domain

detected Domain: info.tools.map

XIOC detected Domain: info.tools.map

extracted_from_files

Domain

detected Domain: info.prompts.map

XIOC detected Domain: info.prompts.map

extracted_from_files

Domain

detected Domain: box.tl

XIOC detected Domain: box.tl

extracted_from_files

Domain

detected Domain: box.tr

XIOC detected Domain: box.tr

extracted_from_files

Domain

detected Domain: box.br

XIOC detected Domain: box.br

extracted_from_files

Domain

detected Domain: values.map

XIOC detected Domain: values.map

extracted_from_files

Domain

detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain

detected Domain: entry.name

XIOC detected Domain: entry.name

extracted_from_files

Domain

detected Domain: skill.md

XIOC detected Domain: skill.md

extracted_from_files

Domain

detected Domain: files.map

XIOC detected Domain: files.map

extracted_from_files

Domain

detected Domain: providerinfo.name

XIOC detected Domain: providerinfo.name

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: data.total

XIOC detected Domain: data.total

extracted_from_files

Domain

detected Domain: items.map

XIOC detected Domain: items.map

extracted_from_files

Domain

detected Domain: icons.safe

XIOC detected Domain: icons.safe

extracted_from_files

Domain

detected Domain: cache.total

XIOC detected Domain: cache.total

extracted_from_files

Domain

detected Domain: pypi.org

XIOC detected Domain: pypi.org

extracted_from_files

Domain

detected Domain: cwe.mitre.org

XIOC detected Domain: cwe.mitre.org

extracted_from_files

Domain

detected Domain: docs.oasis-open.org

XIOC detected Domain: docs.oasis-open.org

extracted_from_files

Domain

detected Domain: process.env.no

XIOC detected Domain: process.env.no

extracted_from_files

Domain

detected Domain: c.green

XIOC detected Domain: c.green

extracted_from_files

Domain

detected Domain: c.red

XIOC detected Domain: c.red

extracted_from_files

Domain

detected Domain: c.blue

XIOC detected Domain: c.blue

extracted_from_files

Domain

detected Domain: api.together.xyz

XIOC detected Domain: api.together.xyz

extracted_from_files

Domain

detected Domain: api.fireworks.ai

XIOC detected Domain: api.fireworks.ai

extracted_from_files

Domain

detected Domain: api.cerebras.ai

XIOC detected Domain: api.cerebras.ai

extracted_from_files

Domain

detected Domain: api.z.ai

XIOC detected Domain: api.z.ai

extracted_from_files

Domain

detected Domain: openrouter.ai

XIOC detected Domain: openrouter.ai

extracted_from_files

Domain

detected Domain: api.github.com

XIOC detected Domain: api.github.com

extracted_from_files

Domain

detected Domain: registry.npmjs.org

XIOC detected Domain: registry.npmjs.org

extracted_from_files

Domain

detected Domain: api.anthropic.com

XIOC detected Domain: api.anthropic.com

extracted_from_files

Domain

detected Domain: generativelanguage.googleapis.com

XIOC detected Domain: generativelanguage.googleapis.com

extracted_from_files

Domain

detected Domain: api.openai.com

XIOC detected Domain: api.openai.com

extracted_from_files

Domain

detected Domain: api.deepseek.com

XIOC detected Domain: api.deepseek.com

extracted_from_files

Domain

detected Domain: api.mistral.ai

XIOC detected Domain: api.mistral.ai

extracted_from_files

Domain

detected Domain: api.groq.com

XIOC detected Domain: api.groq.com

extracted_from_files

Domain

detected Domain: api.x.ai

XIOC detected Domain: api.x.ai

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: agentaudit.dev

XIOC detected Domain: agentaudit.dev

extracted_from_files

Domain

detected Domain: www.agentaudit.dev

XIOC detected Domain: www.agentaudit.dev

extracted_from_files

Domain

detected Domain: img.shields.io

XIOC detected Domain: img.shields.io

extracted_from_files

Domain

detected Domain: www.npmjs.com

XIOC detected Domain: www.npmjs.com

extracted_from_files

Domain

detected Domain: continue.dev

XIOC detected Domain: continue.dev

extracted_from_files

Domain

detected Domain: no-color.org

XIOC detected Domain: no-color.org

extracted_from_files

Domain

detected Domain: servers.xxx

XIOC detected Domain: servers.xxx

extracted_from_files

Domain

detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain

detected Domain: api.openweathermap.org

XIOC detected Domain: api.openweathermap.org

extracted_from_files

Security Analysis Summary

Security Analysis Overview

agentaudit is a mcp extension published by latentspace. Version 3.14.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 422 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

Critical: 37 finding(s)
High: 89 finding(s)
Medium: 286 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

agentaudit is published by latentspace on the mcp marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

@koneksi/mcp-server

alvinreyes

CRITICAL

update-browserslist-db

CRITICAL

@iflow-mcp/intuit-quickbooks-online-mcp-server

chatflowdev

CRITICAL

@youtyan/browser-pilot

GitHub Actions

CRITICAL

second-brain-health-check

iwo-szapar

CRITICAL

@nitrostack/core

abhishekpanditoff

CRITICAL

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

MCP Server Analysis

About This Extension

Detailed Findings

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-112

MCP-TOOL-TOOL-POISONING-cli.mjs-3894

MCP-TOOL-PROCESS-SPAWN-cli.mjs-686

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-89

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-870

MCP-TOOL-PROCESS-SPAWN-cli.mjs-3528

MCP-TOOL-PROCESS-SPAWN-cli.mjs-1310

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-420

MCP-TOOL-TOOL-POISONING-cli.mjs-2039

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-78

MCP-TOOL-TOOL-POISONING-tool-poisoning-detector.mjs-91

MCP-TOOL-TOOL-POISONING-tool-poisoning-detector.mjs-106

MCP-TOOL-TOOL-POISONING-cli.mjs-4013

MCP-TOOL-PROCESS-SPAWN-cli.mjs-1394

MCP-TOOL-PROCESS-SPAWN-cli.mjs-2053

MCP-TOOL-TOOL-POISONING-tool-poisoning-detector.mjs-94

MCP-TOOL-PROCESS-SPAWN-cli.mjs-1247

MCP-TOOL-PROCESS-SPAWN-cli.mjs-690

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-223

MCP-TOOL-TOOL-POISONING-cli.mjs-4022

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-78

MCP-TOOL-PROCESS-SPAWN-cli.mjs-1267

MCP-TOOL-TOOL-POISONING-tool-poisoning-detector.mjs-90

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-556

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-896

MCP-TOOL-PROCESS-SPAWN-cli.mjs-688

MCP-TOOL-TOOL-POISONING-cli.mjs-2038

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-445

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-143

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-189

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-885

MCP-TOOL-TOOL-POISONING-cli.mjs-1387

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-106

MCP-TOOL-TOOL-POISONING-scan-tool-poisoning.mjs-83

MCP-TOOL-PROCESS-SPAWN-tool-poisoning-detector.mjs-280

MCP-TOOL-TOOL-POISONING-cli.mjs-1387

MCP-TOOL-TOOL-POISONING-cli.mjs-1387

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-66

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-5966

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-163

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-333

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-2912

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-293

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-4040

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-268

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-313

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-164

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-178

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-6160

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-6134

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-597

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-65

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-165

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-1723

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-248

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-2912

MCP-TOOL-CREDENTIAL-ACCESS-index.mjs-64

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-2068

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-713

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-282

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-4041

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-300

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-305

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-258

MCP-TOOL-FILESYSTEM-ACCESS-cli.mjs-316

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-3768

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-1810

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-209

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-210

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-210

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-1809

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-2249

MCP-TOOL-CREDENTIAL-ACCESS-cli.mjs-592