Why this verdict
mcp-server . Inconclusive
- inconclusive: gap dynamic_metadata at src/server.ts
- inconclusive: gap no_tools_extracted at package.json
mcp-server worker Inconclusive
- inconclusive: unresolved question on EXEC
- inconclusive: unresolved question on EXFIL
Security findings 0
No individual findings recorded
The inconclusive verdict rests on the open questions and coverage gaps below; 1 candidate finding was refuted on review.
Open questions 6
What the analysis could not settle from the code alone.
[file request scripts/sync-data.js] What does the sync-data script do? Does it fetch data or code from remote/mutable URLs, or write outside the data directory?
Supply chain
[file request scripts/sync-data.js] Does the sync-data script fetch data or code from remote URLs, read credentials, or execute downloaded content?
Supply chain
[file request worker/scripts/embed-data.mjs] Does the embed-data build script, run by npm run build/dev/deploy, read sensitive files, fetch remote content, or execute anything unexpected?
Code execution
[file request worker/scripts/smoke.mjs] Does the smoke script send local data to external hosts or run unexpected commands?
Data exfiltration
[file request worker/scripts/embed-data.mjs] The build/dev/deploy scripts run this script. Does it read anything beyond the bundled compliance data, or perform network access or command execution?
Code execution
[file request worker/scripts/smoke.mjs] Does the smoke script do anything beyond testing the endpoint, such as sending data off-host or running commands?
Data exfiltration
Refuted findings 1
Candidates the review stage examined and rejected, kept for transparency.
Manipulation
mediumRefutedlow confidencePrompt templates instruct the model to append a promotional 'closing signature' advertising hellouchit.com to every answer, injecting vendor marketing into outputs the user did not request.
Full breakdowns at hellouchit.com
Why it was refuted
The closing signature is a visible, openly named product-branding footer in the server's own prompt templates, as the file header states. It carries no hidden channel, data exfiltration, or deceptive behavior, and it promotes the server operator's own resources, so it is not a harmful manipulation.
Coverage gaps 2
Parts of the artifact the static analysis could not fully examine.
dynamic_metadata line 103: resources list returned by ListResourcesRequestSchema handler is computed
src/server.ts
no_tools_extracted MCP server target with no statically extractable tools/prompts/resources
package.json
