← Back to search

@de-otio/repo-aegis-mcp

GitHub Actions Scanned 23d ago

Model Context Protocol server wrapping repo-aegis as agent-readable tools

npm ↗
C
70.3 / 100

Versions

0.7.1latest
Jul 27, 2026
0.7.0
Jul 27, 2026
0.6.0
Jul 22, 2026
0.5.0
Jun 22, 2026
0.4.1
Jun 20, 2026
+ show 6 moreshow less
0.4.0
Jun 20, 2026
0.3.3
May 27, 2026
0.3.2
May 22, 2026
0.3.1
May 9, 2026
0.3.0
May 8, 2026
0.2.0
May 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

repo_aegis_markers_test
annotations: none low

Probe whether a string would trip this repo's scoped deny set.

repo_aegis_markers_list
annotations: none low

List active marker files (engagement-id + pattern count + per-pattern

repo_aegis_check_path
annotations: none low

Scan a single file against this repo's scoped deny set.

repo_aegis_check_staged
annotations: none low

Scan the staged diff (added lines only) against this repo's scoped

aegis_classify_first_touch
annotations: none low

Classify the current repo on first touch (Phase 1 onboarding).

repo_aegis_status
annotations: none low

Show the repo's class, allowed engagements, and deny-set summary.

repo_aegis_engagements_list
annotations: none low

List engagements in the registry. Equivalent to

repo_aegis_engagements_show
annotations: none low

Show one engagement's metadata (no markers). Equivalent to

repo_aegis_audit
annotations: none low

Composite repo health check: marker scan over tracked files,

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, https
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 36

low
Tool 'repo_aegis_markers_test' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_markers_list' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_check_path' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_check_staged' has no annotations annotation_checker · 100%
low
Tool 'aegis_classify_first_touch' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_status' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_engagements_list' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_engagements_show' has no annotations annotation_checker · 100%
low
Tool 'repo_aegis_audit' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-f23m-r3pf-42rh) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-r5fr-rjxr-66jc) dependency_analyzer · 95%
medium
Vulnerable dependency: lodash@4.17.21 (GHSA-xxjr-mmjv-4gpg) dependency_analyzer · 95%
medium
Buffer.from base64 in de-otio-repo-aegis-e3af696/packages/scan/src/octokit-client.ts:210 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in de-otio-repo-aegis-e3af696/packages/cli/src/commands/install-ci.ts:507 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in de-otio-repo-aegis-e3af696/packages/cli/src/commands/install-ci.ts:512 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: repo_aegis_markers_test manifest_parser · 85%
info
Tool: repo_aegis_markers_list manifest_parser · 85%
info
Tool: repo_aegis_check_path manifest_parser · 85%
info
Tool: repo_aegis_check_staged manifest_parser · 85%
info
Tool: aegis_classify_first_touch manifest_parser · 85%
info
Tool: repo_aegis_status manifest_parser · 85%
info
Tool: repo_aegis_engagements_list manifest_parser · 85%
info
Tool: repo_aegis_engagements_show manifest_parser · 85%
info
Tool: repo_aegis_audit manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 192 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%