Gini Agent MCP Server

by Open-Curiosity• 2.3k•• Scanned•Claim this listing•Request removal
Coding Agentsagentagent runtimeai agentbunllm

The agent that remembers and learns.

Gini Agent is an open-source mcp server by Open-Curiosity, written mainly in TypeScript, with 2,252 GitHub stars and the MIT license. Its code was last updated Jul 18, 2026.

Scan summary: scanned Nov 5, 2026 at commit 6c5d85e. Seen able to run dynamic code, read environment and secrets, connect to the internet. Scan policy

Scanned
Full scan at 6c5d85e · Nov 5, 2026
Scanned
Static code scanwarn
Secrets scanfail
Dependency audit203 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (101)

  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    code-execution issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    bun.lock
  • medium
    @xmldom/xmldom@0.8.13: 10 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59, GHSA-8344-3jmq-59r6 +5 more
    bun.lock
  • medium
    @xmldom/xmldom@0.9.10: 13 known vulnerabilities
    GHSA-27p8-2357-5qqv, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +8 more
    bun.lock
  • medium
    adm-zip@0.5.18: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    bun.lock
  • medium
    body-parser@2.3.0: 1 known vulnerability
    GHSA-27r3-jxmh-p828
    bun.lock
  • medium
    brace-expansion@1.1.15: 6 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7 +1 more
    bun.lock
  • medium
    brace-expansion@5.0.7: 5 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7, GHSA-rgw5-rvv9-x895
    bun.lock
  • medium
    browserslist@4.28.4: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    bun.lock
  • medium
    compression@1.8.1: 1 known vulnerability
    GHSA-vc2v-76pw-4v95
    bun.lock
  • medium
    decode-uri-component@0.2.2: 2 known vulnerabilities
    GHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
    bun.lock
  • medium
    fast-uri@3.1.3: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf +7 more
    bun.lock
  • medium
    fflate@0.4.8: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    bun.lock
  • medium
    happy-dom@20.10.6: 3 known vulnerabilities
    GHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8
    bun.lock
  • medium
    image-size@1.2.1: 2 known vulnerabilities
    GHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
    bun.lock
  • medium
    ip-address@10.2.0: 8 known vulnerabilities
    GHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
    bun.lock
  • medium
    js-yaml@4.3.0: 2 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-5p4m-2wfm-xmqj
    bun.lock
  • medium
    linkify-it@2.2.0: 2 known vulnerabilities
    GHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
    bun.lock
  • medium
    markdown-it@10.0.0: 5 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-6v5v-wf23-fmfq, GHSA-6vfc-qv3f-vr6c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    bun.lock
  • medium
    markdown-it@14.3.0: 4 known vulnerabilities
    GHSA-253c-mchw-3w2r, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
    bun.lock
  • medium
    nanoid@3.3.15: 2 known vulnerabilities
    GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
    bun.lock
  • medium
    node-forge@1.4.0: 12 known vulnerabilities
    GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h, GHSA-5cwg-6vw7-rj6p, GHSA-5x38-2vff-x55p +7 more
    bun.lock
  • medium
    pdfjs-dist@6.0.227: 1 known vulnerability
    GHSA-hq66-cqwq-w95j
    bun.lock
  • medium
    postcss@8.4.31: 4 known vulnerabilities
    GHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    postcss@8.5.16: 2 known vulnerabilities
    GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
    bun.lock
  • medium
    sharp@0.34.5: 3 known vulnerabilities
    GHSA-f88m-g3jw-g9cj, GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    sharp@0.35.2: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    bun.lock
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    bun.lock
  • medium
    systeminformation@5.31.11: 3 known vulnerabilities
    GHSA-3f7j-7jwc-fxfj, GHSA-4vjg-vx72-qq4g, GHSA-7648-jmwf-vw7j
    bun.lock
  • medium
    undici@7.28.0: 23 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-3wwx-pv8p-q78v, GHSA-3xpg-4rpp-hhhm +18 more
    bun.lock
  • medium
    uuid@3.4.0: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    bun.lock
  • medium
    uuid@7.0.3: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    bun.lock
  • medium
    xlsx@../../vendor/xlsx-0.20.3.tgz: 5 known vulnerabilities
    GHSA-3x9f-74h4-2fqr, GHSA-4r6h-8v6p-xvw6, GHSA-5pgg-2g8v-p4x9, GHSA-8vcr-vxm8-293m, GHSA-g973-978j-2c3p
    bun.lock
  • medium
    zod@3.25.76: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    bun.lock
  • medium
    Install or build failed in a clean environment
    npm error code EUNSUPPORTEDPROTOCOL npm error Unsupported URL Type "catalog:": catalog: npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T18_59_22_491Z-debug-0.log
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/mobile/src/auth.test.ts:135
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/mobile/src/auth.test.ts:135
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/mobile/src/auth.test.ts:156
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/aws-sigv4.test.ts:119
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/cli/setup.test.ts:1131
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/execution/auto-approve.test.ts:90
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/execution/auto-approve.test.ts:91
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/execution/auto-approve.test.ts:92
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/execution/auto-approve.test.ts:94
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/execution/auto-approve.test.ts:127
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/execution/auto-approve.test.ts:128
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/execution/auto-approve.test.ts:129
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/execution/auto-approve.test.ts:141
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/execution/auto-approve.test.ts:142
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/execution/policy.test.ts:154
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/execution/tool-dispatch.test.ts:888
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/execution/tool-dispatch.test.ts:900
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/execution/tool-dispatch.test.ts:901
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/execution/tool-dispatch.test.ts:902
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/execution/tool-dispatch.test.ts:903
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    packages/runtime/src/integrations/messaging-poller-helpers.test.ts:66
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/integrations/openclaw-migrate.test.ts:992
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/integrations/openclaw-migrate.test.ts:4081
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    packages/runtime/src/integrations/openclaw-migrate.test.ts:4089
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    packages/runtime/src/state/secrets-env.test.ts:49
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:161
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:5176
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:5485
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:5640
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:5891
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/runtime/src/tools/browser.test.ts:7293
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/execution/chat.part1.test.ts:817
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/execution/chat-task.part3.test.ts:426
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/runtime/src/integrations/connectors/codex.test.ts:78
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/integrations/mcp-http.test.ts:247
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/learning/outcomes.probe.test.ts:774
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/runtime/log-redaction.test.ts:11
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/runtime/crash-report.test.ts:285
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/runtime/setup-api.test.ts:204
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/runtime/src/provider.test.ts:3867
  • low
    @hono/node-server@1.19.14: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    bun.lock
  • low
    baseline-browser-mapping@2.10.40: 1 known vulnerability
    GHSA-w5vr-8v7q-w6rv
    bun.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    bun.lock
  • low
    glob@13.0.6: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    bun.lock
  • low
    hono@4.12.27: 9 known vulnerabilities
    GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-79qm-7rj5-m7r9, GHSA-8j4g-w8fx-2239, GHSA-crvj-82cr-hjcx +4 more
    bun.lock
  • low
    minimatch@10.2.5: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    bun.lock
  • low
    postcss-selector-parser@6.0.10: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    bun.lock
  • low
    postcss-selector-parser@7.1.4: 1 known vulnerability
    GHSA-rj75-hqrm-r3gf
    bun.lock
  • low
    protobufjs@7.6.4: 1 known vulnerability
    GHSA-j3f2-48v5-ccww
    bun.lock
  • low
    qs@6.15.3: 3 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx
    bun.lock
  • low
    No manifest declaring network access and environment variables (agent.json)

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Gini Agent alternatives

View more →

Similar mcp servers in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Gini Agent (this page)
Open-Curiosity
2.3kMITJul 18, 2026Scanned, no flagged issues
Context Mode
mksglu
33kNone foundNov 1, 2026Not scanned yet
Serena
oraios
31kNone foundOct 28, 2026Not scanned yet
Fastmcp
PrefectHQ
28kApache-2.0Nov 1, 2026Scanned, no flagged issues
Nuclear
nukeop
19kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP For Beginners
microsoft
18kMITOct 30, 2026Scanned, no flagged issues