MCP, MCP server
Llama Mcp Streamlit
This project is an interactive AI assistant built with Streamlit, NVIDIA NIM's API (LLaMa 3.3:70b)/Ollama, and Model Control Protocol (MCP).
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
INSTALL_REMOTE_SCRIPT
Why this grade
- INSTALL_REMOTE_SCRIPT Medium
Fetches a script from the network and runs it (a pipe to a shell, or an install hook with a URL).
Dockerfile, line 22
RUN curl -fsSL https://deb.nodesource.com/setup_18.x | bash - && \
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Serious
install fetches a script from the network.
INSTALL_REMOTE_SCRIPT
Dockerfile, line 22
RUN curl -fsSL https://deb.nodesource.com/setup_18.x | bash - && \
Network
Pass
No network call found.
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
llama_mcp_streamlit/ui/sidebar.py, line 36
api_key = st.text_input("API Key", os.getenv("API_KEY", ""), type="password")
.gitignore, line 26
# Environment variables and secrets
.gitignore, line 27
.env
Show more
.gitignore, line 28
.env.local
.gitignore, line 30
!.env.example
README.md, line 35
│── main.py # Entry point for the Streamlit app
README.md, line 45
Before running the project, configure the `.env` file with your API keys:
docker-compose.yml, line 10
- .env
poetry.lock, line 1177
description = "Read key-value pairs from a .env file and set them as environment variables"
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Pass
No encoded or minified payload found.
Licence
Note
no licence file found.
LICENCE_MISSING
No file path was stored.
no licence file found.
Maintainer activity
Note
the latest commit is more than 365 days old.
MAINTAINER_STALE
No file path was stored.
2025-02-09T21:36:50+05:30
Note
Hygiene check of commit 55b60ef2d4cb. install fetches a script from the network. reads a credential or environment file. no licence file found. the latest commit is more than 365 days old.
Date and source
Date checked:
github.com
Commit graded: 55b60ef2d4cb08758b9a969890a609a0ddda0b9c
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.