MCP, MCP server
Alr Tw
連接 AI 代理與台灣官方法律來源，提供研究流程、來源查證、證據綁定與答案驗證。
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_SHELL_UNDECLARED
Why this grade
- PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
examples/external_agent_trace_demo.py, line 33
def _send(proc: subprocess.Popen[str], request: dict[str, Any]) -> dict[str, Any]:
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
requests shell access. No manifest field names shell or command execution. can delete files.
PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES
examples/external_agent_trace_demo.py, line 33
def _send(proc: subprocess.Popen[str], request: dict[str, Any]) -> dict[str, Any]:
examples/external_agent_trace_demo.py, line 48
def _notify_initialized(proc: subprocess.Popen[str]) -> None:
examples/external_agent_trace_demo.py, line 62
proc: subprocess.Popen[str],
Show more
examples/external_agent_trace_demo.py, line 82
def _initialize(proc: subprocess.Popen[str]) -> None:
examples/external_agent_trace_demo.py, line 99
def _passing_run(proc: subprocess.Popen[str]) -> dict[str, Any]:
examples/external_agent_trace_demo.py, line 152
def _refused_run(proc: subprocess.Popen[str]) -> dict[str, Any]:
examples/external_agent_trace_demo.py, line 180
proc = subprocess.Popen(
scripts/check_no_forbidden_files.py, line 86
output = subprocess.check_output(
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
src/alr_tw/research/provider_executor.py, line 178
def fetch() -> tuple[ProviderResult, SourceRecord | None, EvidenceSpan | None]:
src/alr_tw/research/provider_executor.py, line 1510
result, source, raw_evidence = fetch()
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
scripts/check_no_forbidden_files.py, line 45
".env",
src/alr_tw/scripts/check_public_boundary.py, line 41
".env",
.gitignore, line 14
# Secrets
Show more
.gitignore, line 15
.env
.gitignore, line 17
!.env.example
README.md, line 182
清除本機資料不能撤回已經送到 TLR、官方網站或其他外部服務的查詢與日誌。不要把 API key、個人資料、未公開案情或秘密寫入 repo、`.env.example`、trace、SQLite 或 MCP client log。完整規則見 [Storage and Purge](docs/STORAGE_AND_PURGE.md) 與 [Data Poli
docs/PUBLIC_PRIVATE_BOUNDARY.md, line 15
Provider code 可公開，不代表 provider 回應、使用者 run database 或 query logs 可公開。`~/.cache/alr-tw`、自訂 `ALR_TW_STORAGE_PATH`、`.env`、shell history、debug capture 與 MCP client logs 都在 repo 邊界外，發布前必
docs/V1_CONTRACT.md, line 74
設定沿用 `.env.example` 的名稱、預設與啟用方式；新安裝應明示資料模式，未知模式拒絕。
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 632576a1d734. requests shell access. No manifest field names shell or command execution. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file.
Date and source
Date checked:
github.com
Commit graded: 632576a1d734b064e7f23c9529401fa587b1c767
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.