ScienceClaw MCP Server by beita6969

Findings (160)

• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  credential-access issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  code-execution issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  exfiltration issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  miner issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  miner issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  miner issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  miner issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  miner issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  secrets issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Deserializes data with pickle/marshal, which can execute code.

  packages/scienceclaw/scienceclaw/evolution/operator_abstraction.py:62
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Deserializes data with pickle/marshal, which can execute code.

  packages/scienceclaw/scienceclaw/runtime/node_worker.py:246
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Deserializes data with pickle/marshal, which can execute code.

  packages/scienceclaw/scienceclaw/runtime/values.py:47
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Deserializes data with pickle/marshal, which can execute code.

  packages/scienceclaw/scilib/hippo_unet.py:93
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Deserializes data with pickle/marshal, which can execute code.

  packages/scienceclaw/scilib/phenoseg_sam.py:104
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  filelock@3.24.3: 9 known vulnerabilities

  GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more

  mcp-servers/arxiv-latex-mcp/uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  mcp@1.26.0: 7 known vulnerabilities

  PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +2 more

  mcp-servers/arxiv-latex-mcp/uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  python-multipart@0.0.22: 6 known vulnerabilities

  PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039, PYSEC-2026-3040 +1 more

  mcp-servers/arxiv-latex-mcp/uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  starlette@0.52.1: 5 known vulnerabilities

  PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249

  mcp-servers/arxiv-latex-mcp/uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  urllib3@2.6.3: 5 known vulnerabilities

  PYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177

  mcp-servers/arxiv-latex-mcp/uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Install or build failed in a clean environment

  n incorrect (and potentially broken) dependency resolution. npm error npm error npm error For a full report see: npm error /tmp/home/.npm/_logs/2026-11-05T19_52_44_937Z-eresolve-report.txt npm error A complete log of this run can be found in: /tmp/home/.npm/_logs/2026-11-05T19_52_44_937Z-debug-0.log
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  extensions/voice-call/src/webhook-security.test.ts:509
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  extensions/voice-call/src/webhook-security.test.ts:518
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  extensions/voice-call/src/webhook-security.test.ts:526
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  extensions/voice-call/src/webhook-security.test.ts:549
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/acp/client.test.ts:373
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/acp/client.test.ts:378
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/acp/client.test.ts:418
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/acp/client.test.ts:449
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/acp/client.test.ts:454
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/agents/openclaw-tools.camera.test.ts:297
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/agents/openclaw-tools.camera.test.ts:321
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/agents/openclaw-tools.camera.test.ts:344
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/agents/openclaw-tools.camera.test.ts:366
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/agents/skills-install.test.ts:90
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-session.create-page.navigation-guard.test.ts:95
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-session.create-page.navigation-guard.test.ts:99
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-session.create-page.navigation-guard.test.ts:109
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-tools-core.snapshot.navigate-guard.test.ts:83
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-tools-core.snapshot.navigate-guard.test.ts:87
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-tools-core.snapshot.navigate-guard.test.ts:95
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/browser/pw-tools-core.snapshot.navigate-guard.test.ts:101
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/channels/telegram/api.test.ts:53
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:119
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:144
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:154
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:169
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:174
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:183
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:189
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/cli/nodes-camera.test.ts:218
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/commands/onboard-helpers.test.ts:102
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.

  src/config/includes.test.ts:439
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/gateway/origin-check.test.ts:80
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/gateway/origin-check.test.ts:98
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/gateway/server.models-voicewake-misc.test.ts:382
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/infra/exec-obfuscation-detect.test.ts:76
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/infra/exec-obfuscation-detect.test.ts:83
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/infra/exec-obfuscation-detect.test.ts:90
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/infra/exec-obfuscation-detect.test.ts:96
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/infra/net/fetch-guard.ssrf.test.ts:96
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/infra/net/fetch-guard.ssrf.test.ts:106
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/link-understanding/detect.test.ts:44
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/link-understanding/detect.test.ts:45
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/link-understanding/detect.test.ts:52
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/link-understanding/detect.test.ts:66
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/link-understanding/detect.test.ts:66
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/logging/redact.test.ts:54
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/logging/redact.test.ts:59
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).

  src/plugin-sdk/root-alias.test.ts:32
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/plugins/install.test.ts:559
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/plugins/install.test.ts:582
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/security/audit.test.ts:206
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/security/audit.test.ts:223
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).

  src/security/external-content.test.ts:327
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:109
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:134
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:161
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:192
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:222
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:254
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:257
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:287
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:290
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:323
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:324
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:361
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:362
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:398
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:399
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:436
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:437
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:465
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:466
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:509
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:535
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:536
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:577
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:609
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:612
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:645
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:668
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/fetch.test.ts:669
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/proxy.test.ts:40
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.

  src/telegram/proxy.test.ts:44
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  2 matches in this file

  docs/gateway/openai-http-api.md:110
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  docs/concepts/session.md:255
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  2 matches in this file

  docs/gateway/openresponses-http-api.md:332
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  docs/gateway/tools-invoke-http-api.md:102
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  docs/zh-CN/concepts/session.md:117
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  2 matches in this file

  docs/zh-CN/gateway/openai-http-api.md:103
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  docs/zh-CN/gateway/tools-invoke-http-api.md:84
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  docs/providers/litellm.md:136
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  2 matches in this file

  docs/zh-CN/gateway/configuration.md:2683
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: curl-auth-header

  2 matches in this file

  docs/zh-CN/gateway/openresponses-http-api.md:295
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  docs/gateway/configuration-reference.md:1470
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/feishu/src/media.test.ts:311
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/channel.test.ts:48
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/nostr-profile.test.ts:14
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/nostr-profile.fuzz.test.ts:11
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/channel.outbound.test.ts:54
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/nostr-bus.test.ts:11
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  extensions/nostr/src/types.test.ts:4
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  2 matches in this file

  extensions/twitch/src/probe.test.ts:56
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  1327 matches in this file

  docs/.i18n/zh-CN.tm.jsonl:1
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  src/auto-reply/command-control.test.ts:370
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/auto-reply/reply.directive.directive-behavior.prefers-alias-matches-fuzzy-selection-is-ambiguous.test.ts:257
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  4 matches in this file

  src/config/env-preserve-io.test.ts:75
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  src/cron/isolated-agent.auth-profile-propagation.test.ts:38
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-secret

  src/discord/accounts.test.ts:2
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  src/gateway/client.watchdog.test.ts:90
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  7 matches in this file

  src/config/redact-snapshot.test.ts:95
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: generic-api-key

  5 matches in this file

  src/logging/redact.test.ts:8
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: private-key

  src/logging/redact.test.ts:73
• lowLow. Minor, or common in normal tools. Shown for information.
  Possible example credential in docs/tests: discord-client-id

  src/security/audit.test.ts:2338
• lowLow. Minor, or common in normal tools. Shown for information.
  github.com/sparkle-project/Sparkle@2.9.0: 2 known vulnerabilities

  GHSA-g3hp-f6mg-559v, GHSA-hg88-v3cw-3qrh

  apps/macos/Package.resolved
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11: 1 known vulnerability

  PYSEC-2026-215

  mcp-servers/arxiv-latex-mcp/uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pydantic-settings@2.13.1: 1 known vulnerability

  GHSA-4xgf-cpjx-pc3j

  mcp-servers/arxiv-latex-mcp/uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pygments@2.19.2: 1 known vulnerability

  PYSEC-2026-2987

  mcp-servers/arxiv-latex-mcp/uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  python-dotenv@1.2.1: 1 known vulnerability

  PYSEC-2026-2270

  mcp-servers/arxiv-latex-mcp/uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  requests@2.32.5: 1 known vulnerability

  PYSEC-2026-2275

  mcp-servers/arxiv-latex-mcp/uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  github.com/yuin/goldmark@1.7.8: 1 known vulnerability

  GO-2026-5320

  scripts/docs-i18n/go.mod
• lowLow. Minor, or common in normal tools. Shown for information.
  golang.org/x/net@0.50.0: 16 known vulnerabilities

  GO-2026-4559, GO-2026-4918, GO-2026-5025, GO-2026-5026, GO-2026-5027 +11 more

  scripts/docs-i18n/go.mod
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  command -v git >/dev/null 2>&1 && git rev-parse --is-inside-work-tree >/dev/null 2>&1 && git config core.hooksPath git-hooks || exit 0

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity