MCP, MCP server
37studio
37studio, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
INSTALL_REMOTE_SCRIPT SECRETS_PATH_CREDENTIAL
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
worker/public/setup.html, line 102
<pre class="cmd">curl -fsSL https://get.docker.com | sh - SECRETS_PATH_CREDENTIAL Medium
Mentions a credential store path (~/.ssh, id_rsa, .npmrc, .aws/credentials, credentials.json, .netrc).
internal/keys/keys.go, line 213
_, err := os.Stat(filepath.Join(home, ".claude", ".credentials.json"))
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Note
requests shell access. The manifest names this permission.
PERMISSION_SHELL_DECLARED
internal/agent/agent.go, line 371
cmd := exec.Command(config.ClaudeBin, append(args, extra...)...)
internal/agent/agent.go, line 655
cmd := exec.Command("npx", append([]string{"-y", "hyperframes@" + config.HFVersion, "render", "comp", "--output", out, "--quality", quality}, renderFlags(quality)...)...)
internal/agent/codex.go, line 51
cmd := exec.Command("codex", args...)
Show more
internal/agent/opencode.go, line 54
cmd := exec.Command("opencode", "models", "--verbose")
internal/agent/opencode.go, line 117
cmd := exec.Command("opencode", append(args, prompt)...)
internal/agent/tools.go, line 56
cmd := exec.Command("npm", "install", "--prefix", toolsDir(), "--no-audit", "--no-fund", "--loglevel=error", t.pkg+"@"+t.version)
internal/assistant/assistant.go, line 109
cmd := exec.Command(config.ClaudeBin, args...)
internal/assistant/assistant.go, line 154
cmd := exec.Command("opencode", append(args, "--", agent.Recap(assistantID, "opencode")+text)...)
Install and update
Serious
install fetches a script from the network.
INSTALL_REMOTE_SCRIPT
README.md, line 96
2. Install Docker: `curl -fsSL https://get.docker.com | sh`.
worker/public/setup.html, line 102
<pre class="cmd">curl -fsSL https://get.docker.com | sh
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
relay/src.js, line 14
async fetch(req, env) {
relay/src.js, line 81
const r = await fetch(`${GRAPH}${path}?${new URLSearchParams(params)}`);
web/src/api.ts, line 57
const res = await fetch("/api" + path, {
Show more
web/src/api.ts, line 72
/** Multipart upload via XHR: fetch() can't report upload progress, and lectures are gigabytes. */
worker/public/connect.html, line 238
fetch("/connect.txt").then((r) => r.ok ? r.text() : Promise.reject(r.status)).then((txt) => {
worker/public/index.html, line 558
fetch("https://img.shields.io/github/stars/Shaitrish/37studio.json").then((r) => r.json()).then((j) => {
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV
dev.sh, line 5
set -a; [ -f .env ] && . ./.env; set +a
cmd/37studio/main.go, line 183
"gemini": os.Getenv("GEMINI_API_KEY") != "",
internal/keys/keys.go, line 213
_, err := os.Stat(filepath.Join(home, ".claude", ".credentials.json"))
Show more
cmd/37studio/main.go, line 184
"eleven": os.Getenv("ELEVENLABS_API_KEY") != "",
cmd/37studio/main.go, line 185
"anthropic": os.Getenv("ANTHROPIC_API_KEY") != "" || os.Getenv("CLAUDE_CODE_OAUTH_TOKEN") != "",
internal/company/scan.go, line 187
if os.Getenv("GEMINI_API_KEY") == "" {
internal/config/config.go, line 1
// Package config reads 37Studio's settings from the environment and .env.
internal/config/config.go, line 22
// Env reads a setting. A .env in the working directory fills in variables the environment lacks, so keys added
internal/config/config.go, line 26
b, _ := os.ReadFile(".env")
internal/config/config.go, line 36
if rest, ok := strings.CutPrefix(k, "STUDIO37_"); ok { // pre-rename name, so older .env files and launchers keep working
internal/gen/eleven.go, line 24
key := os.Getenv("ELEVENLABS_API_KEY")
internal/gen/fal.go, line 29
key := os.Getenv("FAL_KEY")
internal/gen/gemini.go, line 28
key := os.Getenv("GEMINI_API_KEY")
internal/keys/keys.go, line 141
// envOrig remembers keys from the real environment (or .env): the Keys page says so, and removing an override restores them.
internal/keys/keys.go, line 219
if os.Getenv("ANTHROPIC_API_KEY") != "" || os.Getenv("CLAUDE_CODE_OAUTH_TOKEN") != "" || ClaudeLoggedIn() {
internal/source/source_test.go, line 25
for _, p := range []string{"shop-web/README.md", "shop-web/src/ক্লাস.tsx", "shop-web/node_modules/x/index.js", "shop-web/.env",
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit a7e2b28aaa73. requests shell access. The manifest names this permission. install fetches a script from the network. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: a7e2b28aaa7322a1b8f3fdfef2140c5a2d8418d6
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.