← Back to search

terminalize

GitHub Actions Scanned 23d ago

Interactive terminal (PTY) for AI agents — MCP server that gives agents a real shell

npm
? Not scanned yet

Versions

0.5.1latest
May 25, 2026
0.5.0
May 25, 2026
0.4.0
May 20, 2026
0.3.0
May 4, 2026
0.2.5
May 4, 2026
+ show 6 moreshow less
0.2.4
May 4, 2026
0.2.3
May 4, 2026
0.2.2
May 3, 2026
0.2.1
May 3, 2026
0.2.0
May 3, 2026
0.1.6
May 1, 2026

Tools 0

No tools indexed yet.

Permissions 2

shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 20

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.9.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-2pvr-wf23-7pc7) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-4g3v-8h47-v7g6) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-7pw4-f3q4-r2p2) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-8hv8-536x-4wqp) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-f48w-9m4c-m7f5) dependency_analyzer · 95%
medium
Vulnerable dependency: astro@6.2.2 (GHSA-jrpj-wcv7-9fh9) dependency_analyzer · 95%
high
String.fromCharCode chain in mmartinrm97-terminalize-88a8d3b/test/integration/executables.int.test.ts:126 entropy_analyzer · 90%
high
String.fromCharCode chain in mmartinrm97-terminalize-88a8d3b/test/integration/executables.int.test.ts:201 entropy_analyzer · 90%
info
package.json metadata manifest_parser · 100%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (14) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 18 components sbom_generator · 100%
high
Hardcoded Password found in mmartinrm97-terminalize-88a8d3b/src/core/screen.ts secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%