MCP, MCP server
ai.smithery/huuthangntk-claude-vision-mcp-server
Analyze images from multiple angles to extract detailed insights or quick summaries.
Compatibility: Not stated.
Grade C
One Medium finding. Read the findings before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 9083e249c2c0, unchanged since the check below.
INSTALL_LIFECYCLE_HOOK
Why this grade
- INSTALL_LIFECYCLE_HOOK Medium
A package install hook (preinstall, install, postinstall or prepare) runs a script.
package.json, line 11
prepare
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
test-server.ts, line 65
fs.unlink(outputPath, () => {});
Install and update
Concern
runs a script at install time. dependencies are not pinned.
INSTALL_LIFECYCLE_HOOK INSTALL_UNPINNED
package.json, line 11
prepare
package.json, line 17
@anthropic-ai/sdk
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
test-server.ts, line 58
https.get(url, (response) => {
THINK_TOOL_EXAMPLES.md, line 90
Context: I have a React app that fetches data from a third-party API. Currently using simple fetch() calls with try-catch. The API has rate limits of 100 requests per minute.
THINK_TOOL_EXAMPLES.md, line 96
const response = await fetch(`/api/users/${userId}`);
Show more
docs/THINK_TOOL_EXAMPLES.md, line 90
Context: I have a React app that fetches data from a third-party API. Currently using simple fetch() calls with try-catch. The API has rate limits of 100 requests per minute.
docs/THINK_TOOL_EXAMPLES.md, line 96
const response = await fetch(`/api/users/${userId}`);
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
run-tests.sh, line 18
echo "Or create a .env file with:"
test-server.ts, line 12
const API_KEY = process.env.ANTHROPIC_API_KEY || '';
.gitignore, line 11
# Environment variables
Show more
.gitignore, line 12
.env
.gitignore, line 13
.env.local
README.md, line 72
# Create .env file with your API key
README.md, line 73
echo "ANTHROPIC_API_KEY=your-key-here" > .env
README.md, line 74
echo "CLAUDE_MODEL=claude-sonnet-4-20250514" >> .env
README.md, line 215
2. **Use .gitignore** - Ensure `.env` files are ignored
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Note
no licence file found.
LICENCE_MISSING
No file path was stored.
no licence file found.
Maintainer activity
Note
the latest commit is more than 365 days old.
MAINTAINER_STALE
No file path was stored.
2025-10-08T04:31:37+03:30
Note
Hygiene check of commit 9083e249c2c0. can delete files. runs a script at install time. dependencies are not pinned. can reach a host that is not written as a fixed address. reads a credential or environment file. no licence file found. the latest commit is more than 365 days old.
Date and source
Date checked:
github.com
Commit graded: 9083e249c2c0a318acbe7889c077cdc25e390d1a
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.