MCP, MCP server
ChainAgents
ChainAgents, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT
Why this grade
- NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
chainagents/exports/pdf_images.py, line 340
sock = socket.create_connection(
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
chainagents/rag/runtime.py, line 1044
shutil.rmtree(self.collection_directory, ignore_errors=True)
chainagents/rag/runtime.py, line 1369
shutil.rmtree(collection_directory, ignore_errors=True)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
chainagents/exports/pdf_images.py, line 340
sock = socket.create_connection(
chainagents/exports/response.py, line 1209
def fetch(self, url: str, headers: object = None) -> object:
chainagents/exports/response.py, line 1217
return super().fetch(url, headers)
Show more
docs/API_SECURITY.md, line 81
const response = await fetch('/api/status', {
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
chainagents/interfaces/api/security.py, line 36
return cls(token=os.environ.get("CHAINAGENTS_API_TOKEN"))
chainagents/interfaces/chainlit/app.py, line 611
legacy_password = os.getenv("CHAINLIT_AUTH_PASSWORD", "")
chainagents/interfaces/chainlit/app.py, line 652
AUTH_SECRET = os.getenv("CHAINLIT_AUTH_SECRET", "").strip()
Show more
chainagents/interfaces/chainlit/persistence.py, line 165
aws_access_key = os.getenv("APP_AWS_ACCESS_KEY")
chainagents/interfaces/chainlit/persistence.py, line 166
aws_secret_key = os.getenv("APP_AWS_SECRET_KEY")
chainagents/interfaces/chainlit/persistence.py, line 172
gcs_private_key = os.getenv("APP_GCS_PRIVATE_KEY")
chainagents/interfaces/chainlit/persistence.py, line 176
azure_storage_key = os.getenv("APP_AZURE_STORAGE_ACCESS_KEY")
chainagents/runtime/config.py, line 659
os.getenv("ANTHROPIC_API_KEY")
langfuse_setup.md, line 22
Compose file or provide equivalent `.env` values.
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
uv.lock, line 1
version = 1
tests/test_deepagent_runtime_rag.py, line 1
"""Test Deep Agent runtime configuration, RAG, MCP, and command integration."""
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 4b65de673c80. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 4b65de673c800b2f00bfcaf148010ca6e864627c
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.