MCP Omnisearch

Findings (5)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  launch-editor@2.14.1: 3 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  vite@8.0.8: 7 known vulnerabilities

  GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-fx2h-pf6j-xcff, GHSA-r825-w8mm-5pxw +2 more

  pnpm-lock.yaml
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Install contacted hosts other than package registries

  34.5.16.104.in-addr.arpa
• lowLow. Minor, or common in normal tools. Shown for information.
  Reads environment variables not listed in the manifest

  OMNISEARCH_LARGE_RESULT_MODE

Network activity

Tools exposed (2)

• search

  Discover configured provider API functions for Code Mode. Omit query to list names and descriptions. Supply a function name or space-separated keywords to get matching TypeScript declarations. Call this before execute; arguments and results use native provider formats, not the consolidated tool form

• execute

  Run JavaScript in an isolated Pi QuickJS sandbox. Discover native provider functions with search, then call await tools.<name>(args). Use return, text() or console.log() for output. Promise.all supports parallel requests. Only final output reaches the client. No filesystem, network, Node APIs, modul