← Back to search

Kin

firelock-ai Scanned 21d ago

Start the MCP server for Kin, a graph-native code repository for people and AI agents, through an npm-friendly wrapper.

? Not scanned yet

Versions

No versions found.

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 26

info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:82 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:83 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:99 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:162 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:203 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/advisory-sweep.test.mjs:222 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:715 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:719 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:723 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:727 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:731 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:735 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in firelock-ai-kin-1fcffd7/scripts/test-release-workflow-authority.py:739 entropy_analyzer · 70%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/scripts/verify-npm-attestation.mjs:11 entropy_analyzer · 75%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/scripts/verify-npm-attestation.mjs:17 entropy_analyzer · 75%
medium
Buffer.from base64 in firelock-ai-kin-1fcffd7/packages/kin-mcp/test/index.test.js:94 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Required env vars (43) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%