AgentScore is for sale. View the assets and acquisition details →
high

AGENTSCORE-2026-0019

MCP package: @cg3/prior-mcp

Published 5/1/2026 · 0.6.40.7.0

@cg3/prior-mcp updated from 0.6.4 to 0.7.0. Score changed 100/100 to 75/100 (-25). Risk: LOW to MODERATE. 2 findings.

10075
Score
LOWMODERATE
Risk
WARN
Verdict

Findings

  • high command_injection: Potential command injection: shell execution with template literal input
  • low no_provenance: Package is not published with provenance attestations or trusted publishing. Published by: cg3llc