Agent Reliability Analyzer MCP Server
by trustablAgent Reliability Analyzer: deterministic scanner that finds and fixes AI agent reliability failures
Agent Reliability Analyzer is an open-source mcp server by trustabl, written mainly in Go, with 82 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit b1c877c. Seen able to run shell commands, run dynamic code, read environment and secrets, connect to the internet. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
b1c877c · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit665 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Passed. This check ran and found nothing it flags.Manifestserver.jsonpassPassed. This check ran and found nothing it flags.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (101)
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.code-execution issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Contacts a hard-coded IP address instead of a domain name.
testdata/corpus/ToolBench/toolbench/inference/Downstream_tasks/rapidapi.py:64 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/excel-demo/.erb/configs/webpack.config.renderer.dev.ts:38 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/excel-demo/.erb/configs/webpack.config.renderer.dev.ts:186 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/excel-demo/.erb/configs/webpack.config.renderer.dev.ts:200 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/excel-demo/.erb/scripts/check-native-dep.ts:19 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/excel-demo/.erb/scripts/electron-rebuild.js:16 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
testdata/corpus/langchain-demo/agent.py:18 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/go-git/go-billy/v5@5.5.0: 2 known vulnerabilitiesGO-2026-5490, GO-2026-5597
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.github.com/klauspost/compress@1.17.11: 1 known vulnerabilityGO-2026-5841
go.mod - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.accelerate@0.20.3: 1 known vulnerabilityPYSEC-2026-3804
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.deepspeed@0.9.2: 1 known vulnerabilityPYSEC-2024-109
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fastapi@0.95.1: 1 known vulnerabilityPYSEC-2024-38
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sentencepiece@0.1.99: 1 known vulnerabilityPYSEC-2026-1909
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.torch@2.9.1: 4 known vulnerabilitiesPYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.orjson@3.9.9: 2 known vulnerabilitiesPYSEC-2024-40, PYSEC-2026-107
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.python-multipart@0.0.9: 8 known vulnerabilitiesPYSEC-2026-1851, PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038 +3 more
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.26.1: 8 known vulnerabilitiesPYSEC-2023-83, PYSEC-2026-161, PYSEC-2026-1941, PYSEC-2026-1943, PYSEC-2026-2280 +3 more
testdata/corpus/ToolBench/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.axios@1.7.9: 33 known vulnerabilitiesGHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw, GHSA-3p68-rc4w-qgx5, GHSA-3w6x-2g7m-8v23, GHSA-42h9-826w-cgv3 +28 more
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.3: 4 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jsondiffpatch@0.6.0: 2 known vulnerabilitiesGHSA-33vc-wfww-vjfv, GHSA-j4fx-xxwh-2485
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash-es@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.8: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.12: 2 known vulnerabilitiesGHSA-37ch-88jc-xwx2, GHSA-37ch-88jc-xwx2
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@9.0.1: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.24.1: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
testdata/corpus/deep-research/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 21 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +16 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.25.1: 4 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.0.1: 12 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +7 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 4 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm, GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 9 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +4 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nodemailer@7.0.4: 44 known vulnerabilitiesGHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +39 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 6 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +1 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 4 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 12 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849, GHSA-6g55-p6wh-862q +7 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.semver@5.3.0: 2 known vulnerabilitiesGHSA-c2qf-rxjj-qqgw, GHSA-c2qf-rxjj-qqgw
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.smol-toml@1.4.2: 6 known vulnerabilitiesGHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2, GHSA-v3rj-xjv7-4jmq, GHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2 +1 more
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 3 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tar-fs@2.1.3: 2 known vulnerabilitiesGHSA-vj76-c3g6-qr5v, GHSA-vj76-c3g6-qr5v
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 3 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
testdata/corpus/email-agent/bun.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nodemailer@7.0.6: 22 known vulnerabilitiesGHSA-268h-hp4c-crq3, GHSA-2x7j-588g-ccc2, GHSA-39m8-27wv-hr27, GHSA-4ffr-jq9g-5ffx, GHSA-4g23-2xm8-66gc +17 more
testdata/corpus/email-agent/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.protobuf@4.25.9: 1 known vulnerabilityPYSEC-2026-1805
testdata/corpus/email-agent/requirements.txt - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.0: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 4 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.53.2: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@10.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.21: 8 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff +3 more
testdata/corpus/simple-chatapp/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.github.com/cloudflare/circl@1.3.7: 2 known vulnerabilitiesGO-2025-3754, GO-2026-4550
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/mod@0.25.0: 2 known vulnerabilitiesGO-2026-6179, GO-2026-6180
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/net@0.41.0: 17 known vulnerabilitiesGO-2026-4440, GO-2026-4441, GO-2026-4918, GO-2026-5025, GO-2026-5026 +12 more
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/sys@0.35.0: 1 known vulnerabilityGO-2026-5024
go.mod - lowLow. Minor, or common in normal tools. Shown for information.golang.org/x/text@0.27.0: 2 known vulnerabilitiesGO-2026-5970, GO-2026-6629
go.mod - lowLow. Minor, or common in normal tools. Shown for information.pydantic@1.10.7: 1 known vulnerabilityPYSEC-2026-1812
testdata/corpus/ToolBench/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.requests@2.30.0: 4 known vulnerabilitiesPYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
testdata/corpus/ToolBench/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.idna@3.9.0: 2 known vulnerabilitiesPYSEC-2026-215, PYSEC-2026-215
testdata/corpus/ToolBench/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.marshmallow@3.9.1: 1 known vulnerabilityPYSEC-2026-1605
testdata/corpus/ToolBench/requirements.txt - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@2.1.11: 1 known vulnerabilityGHSA-866g-f22w-33x8
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@ai-sdk/provider-utils@2.1.6: 1 known vulnerabilityGHSA-866g-f22w-33x8
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.ai@4.1.17: 1 known vulnerabilityGHSA-rwvc-j5jr-mgvh
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.23.1: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.follow-redirects@1.15.9: 1 known vulnerabilityGHSA-r4q5-vmmm-2653
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.qs@6.13.0: 10 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883 +5 more
testdata/corpus/deep-research/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.0: 2 known vulnerabilitiesGHSA-4x5r-pxfx-6jf8, GHSA-4x5r-pxfx-6jf8
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@tootallnate/once@1.1.2: 2 known vulnerabilitiesGHSA-vpq2-c234-7xj6, GHSA-vpq2-c234-7xj6
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.deepmerge@4.3.1: 2 known vulnerabilitiesGHSA-gcqx-w48m-w2h4, GHSA-gcqx-w48m-w2h4
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.mailparser@3.7.4: 2 known vulnerabilitiesGHSA-7gmj-h9xc-mcxc, GHSA-7gmj-h9xc-mcxc
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.mdast-util-to-hast@13.2.0: 2 known vulnerabilitiesGHSA-4fh9-h7wg-q85m, GHSA-4fh9-h7wg-q85m
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.0.10: 1 known vulnerabilityGHSA-rj75-hqrm-r3gf
testdata/corpus/email-agent/bun.lock - lowLow. Minor, or common in normal tools. Shown for information.@babel/core@7.28.5: 1 known vulnerabilityGHSA-4x5r-pxfx-6jf8
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.baseline-browser-mapping@2.8.25: 1 known vulnerabilityGHSA-w5vr-8v7q-w6rv
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.postcss-selector-parser@6.1.2: 2 known vulnerabilitiesGHSA-rj75-hqrm-r3gf, GHSA-w9m9-85wc-3x92
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.yaml@2.8.1: 1 known vulnerabilityGHSA-48c2-rrv3-qjmp
testdata/corpus/simple-chatapp/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.Reads environment variables not listed in the manifestTOKENIZERS_PARALLELISM, API_POOL_FILE, OPENAI_KEY, OPENAI_ORG, OPENAI_TYPE, OPENAI_VER, WORLD_SIZE, LOCAL_RANK, OPENAI_MODEL, OPENAI_ENDPOINT, FIREWORKS_KEY, CUSTOM_MODEL, CONTEXT_SIZE, FIRECRAWL_CONCURRENCY, FIRECRAWL_KEY
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Agent Reliability Analyzer alternatives
View more →Similar mcp servers in Research & Analysis, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Agent Reliability Analyzer (this page) trustabl | 82 | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Worldmonitor koala73 | 90k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| GPT Researcher assafelovic | 30k | Apache-2.0 | Oct 10, 2026 | Scanned, no flagged issues |
| Auto Claude Code Research In Sleep wanshuiyin | 18k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Deep Research u14app | 4.7k | MIT | Jun 18, 2026 | Scanned, no flagged issues |
| MCP Server Chart antvis | 4.4k | MIT | Aug 27, 2026 | Scanned, no flagged issues |