Grades are a hygiene check, not a security guarantee.

MCP, MCP server

io.github.blinkboxhq/blinkbox

Open-source automation platform (Zapier / Make / n8n alternative) with a native MCP server — connect Claude Code, Cursor or ChatGPT and let the agent build, run and debug your workflows.

Compatibility: Not stated.

Grade D

Two or more Medium findings, or a High finding. Only try it in a sandbox.

Graded by PlugVetRubric v2

Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.

INSTALL_REMOTE_SCRIPT NETWORK_HOST_FROM_INPUT OBFUSCATION_MINIFIED_PAYLOAD

Why this grade

  • INSTALL_REMOTE_SCRIPT High

    Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).

    apps/backend/nixpacks.toml, line 7 "curl -fsSL https://ollama.com/install.sh | sh || echo 'Ollama install skipped'"

  • NETWORK_HOST_FROM_INPUT Medium

    A file takes a URL or endpoint as input and has no fixed host list.

    apps/backend/src/infra/airtable.poller.js, line 50 const res = await fetch(url.toString(), {

  • OBFUSCATION_MINIFIED_PAYLOAD Medium

    Contains a very long line with almost no spaces in a script or style file.

    package-lock.json, line 1 {

Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.

If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.

Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.

What was checked

Plain notes from the hygiene checks.

  • Permissions

    Concern

    can delete files.

    PERMISSION_DELETE_FILES

    apps/backend/src/infra/binary.store.js, line 134

    if (stat.isFile()) await fs.unlink(fullPath);

    apps/backend/src/infra/binary.store.js, line 136

    await fs.rm(dirPath, { recursive: true, force: true });

    apps/backend/src/infra/binary.store.ts, line 291

    if (stat.isFile()) await fs.unlink(fullPath);

    Show more

    apps/backend/src/infra/binary.store.ts, line 294

    await fs.rm(dirPath, { recursive: true, force: true });

  • Install and update

    Serious

    install fetches a script from the network. The docs document an installer that pipes a download into a shell.

    INSTALL_REMOTE_SCRIPT INSTALL_DOCUMENTED_INSTALLER

    .claude/context/self-hosting-manifest.md, line 156

    curl -fsSL https://raw.githubusercontent.com/blinkboxhq/Blinkbox/main/docker/install.sh | sudo sh

    apps/backend/nixpacks.toml, line 7

    "curl -fsSL https://ollama.com/install.sh | sh || echo 'Ollama install skipped'"

    apps/frontend/src/pages/Dashboard/components/SelfHost.jsx, line 7

    const INSTALL_CMD = 'curl -fsSL https://raw.githubusercontent.com/blinkboxhq/Blinkbox/main/docker/install.sh | sudo sh';

    Show more

    apps/frontend/src/pages/marketing/SelfHosting.jsx, line 20

    code: `curl -fsSL https://raw.githubusercontent.com/blinkboxhq/Blinkbox/main/docker/install.sh | sudo sh

    docker/env.example, line 8

    # curl -fsSL https://raw.githubusercontent.com/blinkboxhq/Blinkbox/main/docker/install.sh | sudo sh

    docker/install.sh, line 4

    # curl -fsSL https://raw.githubusercontent.com/blinkboxhq/Blinkbox/main/docker/install.sh | sudo sh

    docker/install.sh, line 106

    [ "$(id -u)" -eq 0 ] || die "Run as root: curl -fsSL $INSTALL_URL | sudo sh"

    docker/install.sh, line 130

    curl -fsSL https://get.docker.com | sh >/dev/null 2>&1 || die "Docker install failed. Install Docker, then re-run."

  • Network

    Serious

    accepts a host from input, with no fixed list in this file.

    NETWORK_HOST_FROM_INPUT

    apps/backend/src/infra/airtable.poller.js, line 50

    const res = await fetch(url.toString(), {

    apps/backend/src/infra/asana.poller.js, line 48

    const res = await fetch(url, { headers: { Authorization: `Bearer ${token}` }, signal: AbortSignal.timeout(15000) });

    apps/backend/src/infra/azureDevops.poller.js, line 25

    const res = await fetch(url, { headers: { Authorization: authHeader(pat), Accept: "application/json" } });

    Show more

    apps/backend/src/infra/azureDevops.poller.js, line 32

    const res = await fetch(url, {

    apps/backend/src/infra/calendly.poller.js, line 11

    const res = await fetch(`${BASE}/users/me`, {

    apps/backend/src/infra/calendly.poller.js, line 28

    const res = await fetch(`${BASE}/scheduled_events?${params}`, {

    apps/backend/src/infra/clickup.poller.js, line 14

    const res = await fetch(url, { headers: { Authorization: token } });

    apps/backend/src/infra/datadog.poller.js, line 16

    const res = await fetch(`https://api.datadoghq.com/api/v1/events?${params}`, {

    apps/backend/src/nodes/rss.node.js, line 19

    res = await axios.get(currentUrl, {

    apps/backend/Dockerfile.selfhost, line 58

    CMD node -e "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"

    docker/install.sh, line 462

    "fetch('http://127.0.0.1:3000/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))" \

    packages/nodes/agent_ollama/ConfigPanel.jsx, line 31

    const res = await fetch(`${import.meta.env.VITE_API_URL || "http://localhost:3000"}/api/ollama/pull`, {

  • Secrets

    Concern

    reads a credential or environment file.

    SECRETS_ENV_READ SECRETS_PATH_DOTENV

    apps/backend/e2e/engine.contracts.e2e.test.js, line 39

    process.env.JWT_SECRET = "

    apps/backend/e2e/engine.contracts.e2e.test.js, line 40

    process.env.ENCRYPTION_KEY = "

    apps/backend/e2e/workflow.e2e.test.js, line 9

    process.env.JWT_SECRET = "

    Show more

    apps/backend/e2e/workflow.e2e.test.js, line 10

    process.env.ENCRYPTION_KEY = "

    apps/backend/src/config/env.js, line 6

    dotenv.config({ path: resolve(__dirname, "../../.env") });

    apps/backend/src/config/env.js, line 13

    if (!process.env.JWT_SECRET) {

    apps/backend/src/config/env.js, line 17

    if (!process.env.ENCRYPTION_KEY || process.env.ENCRYPTION_KEY.length !== 32) {

    apps/backend/src/config/env.js, line 21

    if (process.env.SELF_HOSTED === "true" && !process.env.SELF_HOST_LICENSE_KEY) {

    apps/backend/src/config/env.js, line 25

    export const JWT_SECRET = process.env.JWT_SECRET;

    apps/backend/src/config/env.js, line 267

    // on every check - a customer cannot widen their own window by editing .env.

    apps/backend/src/infra/gmail.poller.test.js, line 5

    // are unset. CI has no .env, so seed them before the dynamic import.

    apps/backend/src/infra/selfhost.bootstrap.js, line 6

    * are never written to disk and never appear in .env: if this box is stolen,

    apps/backend/src/modules/credentials/oauth.controller.js, line 58

    return res.status(500).json({ message: `${providerName} OAuth not configured. Set ${provider.clientEnvKey} in .env` });

    apps/backend/src/modules/mcp/mcp.tools.test.js, line 7

    // unset. CI has no .env, so seed them before the dynamic import.

    apps/backend/src/modules/selfhost/seedOwner.js, line 6

    * stdout - it is never written to .env, never passed as an argv (visible in

    apps/backend/src/modules/selfhost/selfhost.controller.js, line 376

    // window itself by editing its own .env.

  • Agent instructions

    Pass

    No instruction to ignore earlier instructions or to hide a step.

  • Obfuscation

    Concern

    contains a minified payload.

    OBFUSCATION_MINIFIED_PAYLOAD

    package-lock.json, line 1

    {

    apps/backend/public/logo.svg, line 1

    <svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

    apps/backend/src/core/assets/blinkbox-logo.svg, line 1

    <svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"

    Show more

    apps/backend/src/nodes/operationParams.js, line 16

    "airtable": {"create":{"baseId":{},"fields":{"t":"object"},"tableName":{},"typecast":{"t":"boolean"}},"read":{"baseId":{},"filterFormula":{},"maxRecords":{"t":"number"},"sort":{"t"

    apps/backend/src/nodes/operationParams.js, line 17

    "anthropic": {"message":{"prompt":{"t":"string","r":true},"maxTokens":{"t":"number"},"model":{},"outputFormat":{"t":"string"},"stop":{"t":"string"},"systemPrompt":{},"temperature":

    apps/backend/src/nodes/operationParams.js, line 18

    "asana": {"listTasks":{"assignee":{},"completedSince":{},"limit":{"t":"number"},"modifiedSince":{},"optFields":{},"projectGid":{},"workspaceGid":{}},"getTask":{"taskGid":{"t":"stri

    apps/backend/src/nodes/operationParams.js, line 19

    "azure_devops": {"createWorkItem":{"assignedTo":{},"description":{},"priority":{"t":"number"},"project":{},"tags":{},"title":{},"workItemType":{"t":"string"}},"getWorkItem":{"workI

    apps/backend/src/nodes/operationParams.js, line 20

    "box": {"uploadFile":{"fileName":{"r":true},"content":{"t":"string"},"folderId":{"t":"string"}},"uploadFromUrl":{"fileName":{"r":true},"url":{"r":true},"folderId":{"t":"string"}},"

    apps/backend/src/nodes/operationParams.js, line 21

    "calendly": {"getUser":{"userUri":{"t":"string"}},"listOrganizationMemberships":{"count":{},"email":{},"organizationUri":{},"pageToken":{}},"getOrganizationMembership":{"membership

    apps/backend/src/nodes/operationParams.js, line 22

    "clickup": {"listTasks":{"archived":{},"assignees":{},"includeClosed":{},"listId":{"t":"string"},"orderBy":{},"page":{},"reverse":{},"statuses":{},"subtasks":{}},"getTask":{"custom

    apps/backend/src/nodes/operationParams.js, line 23

    "datadog": {"submitMetric":{"metricName":{"r":true},"host":{},"metric":{},"metricType":{},"tags":{},"value":{}},"queryMetrics":{"query":{"r":true},"from":{},"to":{}},"getMetrics":{

    apps/backend/src/nodes/triggerFields.js, line 1

    // GENERATED by scripts/generate-trigger-fields.mjs - do not edit by hand.

    apps/backend/src/nodes/_packaged/deepseek/router.js, line 1

    /**

  • Licence

    Pass

    A licence file is present (LICENSE).

  • Maintainer activity

    Pass

    The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 1066e45814d2. can delete files. install fetches a script from the network. The docs document an installer that pipes a download into a shell. accepts a host from input, with no fixed list in this file. reads a credential or environment file. contains a minified payload.

Date and source

Date checked:

View source

github.com

Commit graded: 1066e45814d26183ead0984b3dfac914c822326b

This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.

Read how this letter is chosen