AGENTSCORE-2026-0091
MCP package: code-auditor-mcp
Published 7/29/2026 · 3.1.1 → 3.4.7
Confirmed by review on 2026-09-25
At least one finding below was checked in the package source and is a real vulnerability. Details and fixed versions are listed under the finding. Reviewed in source: the flagged code was located in the published package, read in context and traced from input to sink (AI-assisted), and every confirmation was re-audited independently.
code-auditor-mcp updated from 3.1.1 to 3.4.7. Score changed 70/100 to 55/100 (-15). Risk: MODERATE to ELEVATED. 3 findings.
70 → 55
Score
MODERATE → ELEVATED
Risk
WARN
Verdict
Findings
- high command_injection: Potential command injection: shell execution with template literal inputConfirmedThe audit tool's git ref argument is interpolated unvalidated into a shell command in dist/auditRunner.js. Affects 3.0.0 to 4.0.x; fixed in 4.1.0.
- high unsafe_eval: Uses eval() with dynamic inputNot a vulnerabilityThe match is the text eval($$$) inside a code-search rule example, not a call to eval.
- low no_provenance: Package is not published with provenance attestations or trusted publishing. Published by: bhammond