AgentScore is for sale. View the assets and acquisition details →
high

AGENTSCORE-2026-0092

MCP package: @mentu/metamcp

Published 7/30/2026 · 0.4.10.6.0

@mentu/metamcp updated from 0.4.1 to 0.6.0. Score changed 90/100 to 75/100 (-15). Risk: LOW to MODERATE. 2 findings.

9075
Score
LOWMODERATE
Risk
WARN
Verdict

Findings

  • high command_injection: Potential command injection: shell execution with template literal input
  • low no_provenance: Package is not published with provenance attestations or trusted publishing. Published by: rashidazarang