{"name":"io.github.AbduljabbarBXR/grim-mcp","slug":"abduljabbarbxr-grim-mcp","title":"grim-mcp","description":"Security audit for AI agents: code, deps, exposure, secrets, drift, SBOM, and IoC.","url":"https://mcp.market/server/abduljabbarbxr-grim-mcp","rating":null,"grade":"C","score":62,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":32,"stars":1,"forks":0,"downloads_week":822,"last_push_at":"2026-09-19T15:13:22.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":null,"website":null,"version":"0.6.2","remotes":[],"packages":[{"registryType":"npm","identifier":"grim-mcp","version":"0.6.2","transport":{"type":"stdio"}},{"registryType":"pypi","identifier":"grim-mcp","version":"0.6.2","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":62,"grade":"C","scanned_at":"2026-09-19T21:13:48.848Z","report":{"scannerVersion":"0.1.8","scannedAt":"2026-09-19T21:13:48.865Z","components":{"code":{"score":5,"max":25,"notes":["33 source files scanned","32 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"python/grim/core/fixplan.py: …fe_load(\", line, count=1), False # shell=True with untrusted input -> disable shell e…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"python/grim/engines/codepatterns.py: …\\beval\\s*\\(\"), \"high\", \"eval() usage\", \"eval executes arbitra…"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"grim-mcp-0.6.2/src/grim/core/fixplan.py: …fe_load(\", line, count=1), False # shell=True with untrusted input -> disable shell e…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"grim-mcp-0.6.2/src/grim/engines/codepatterns.py: …\\beval\\s*\\(\"), \"high\", \"eval() usage\", \"eval executes arbitra…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"grim-mcp","version":"0.6.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-09-19T15:01:12.212Z","repositoryUrl":"git+https://github.com/AbduljabbarBXR/grim.git","weeklyDownloads":822},{"registryType":"pypi","identifier":"grim-mcp","version":"0.6.2","found":true,"dependencyCount":2,"publishedAt":"2026-09-19T14:59:54.365125Z","repositoryUrl":"https://github.com/AbduljabbarBXR/grim"}],"repo":{"found":true,"owner":"AbduljabbarBXR","repo":"grim","archived":false,"pushedAt":"2026-09-19T15:13:22Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/60580233?v=4","ownerCreatedAt":"2020-02-02T18:04:16Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/60580233?v=4&s=128","source":"registry"},"presence":{"stars":1,"forks":0,"downloadsWeek":822,"license":"MIT","lastPushAt":"2026-09-19T15:13:22.000Z","score":32}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 62: subprocess with shell=True; eval / new Function used; subprocess with shell=True","createdAt":"2026-09-19T21:13:49.216Z"},{"kind":"restore","fromGrade":"F","toGrade":"D","reason":"score 54: curl | sh in a script; curl | sh in a script; subprocess with shell=True","createdAt":"2026-09-19T19:29:23.155Z"}],"reviews":[]}