← Back to search Server uses network capabilities via: fetch(), requests Server uses filesystem capabilities via: open(), os, path, pathlib, shutil, tempfile Server uses shell capabilities via: child_process, spawn(), spawnSync(), subprocess Server uses env_vars capabilities via: os.getenv()
io.github.ewalid/rosetta-mcp
AI-powered Excel translation preserving formatting, formulas, and data integrity.
? Not scanned yet
Versions
0.1.1latestfirst seen May 19, 2026
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 71
high
Remote transport without authentication
info
Sandbox failed to start for behavioral verification
medium
Suspicious package name: react-dom
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-6q6h-j7hj-3r64)
medium
Vulnerable dependency: happy-dom@20.0.11 (GHSA-w4gp-fjgq-3q4g)
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-6g55-p6wh-862q)
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-fxqj-rqcc-2cmp)
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-qx2v-qp2m-jg93)
medium
Vulnerable dependency: postcss@8.4.49 (GHSA-r28c-9q8g-f849)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.5 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@4.0.16 (GHSA-82fw-gwwq-j7x9)
medium
Vulnerable dependency: click@8.1.7 (PYSEC-2026-2132)
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94)
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-5rvq-cxj2-64vf)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-6jv3-5f52-599m)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-v9pg-7xvm-68hf)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-vffw-93wf-4j4q)
medium
Vulnerable dependency: python-multipart@0.0.12 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-1851)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-1852)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3036)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3037)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3038)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3039)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3040)
medium
Vulnerable dependency: python-multipart@0.0.12 (PYSEC-2026-3041)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9hjg-9r4m-mvj7)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-9wx4-h78v-vm56)
medium
Vulnerable dependency: requests@2.31.0 (GHSA-gc5v-m9x4-r6x2)
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1872)
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-1873)
medium
Vulnerable dependency: requests@2.31.0 (PYSEC-2026-2275)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58)
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482)
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483)
info
package.json metadata
info
pyproject.toml metadata
info
Transport: stdio
info
Required env vars (6)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 412 components
high
Generic API Key Assignment found in ewalid-rosetta-909eacc/README.md
medium
No build provenance detected (SLSA L0)