Security flags foundOur static scan found signals worth reviewing before you trust this with an agent. See exactly what, per check, below.
Install-time hooks & dependenciesno flags
Code that runs when you install it, before you ever call a tool.
Runs code / shell commandsno flags
Whether the server can execute commands on your machine.
Secrets & credentials2 findings
INFOsrc/index.ts:99 — Reads a secret-shaped environment variable. Ordinary for a credentialed server; recorded for completeness.
INFOsrc/index.ts:251 — Reads a secret-shaped environment variable. Ordinary for a credentialed server; recorded for completeness.
Network calls out1 finding
MEDIUMtests/gemini-media.test.ts:36 — Hardcoded external endpoint 'www.youtube.com'. STATIC signal only: this flags a declared destination for human or dynamic-egress confirmation; it does NOT assert exfiltration.
Prompt-injection passthrough1 finding
INFOsrc/gemini-media.ts — HEURISTIC: this file both fetches external content and returns content as tool output, with no obvious sanitization. External text returned into tool output can carry instructions an agent obeys (prompt-injection passthrough). Confirm manually; this is a hint, not proof.
Permission scope breadthno flags
How much access it asks for versus what its job needs.