MCP, MCP server
Local Coding Agent
Local Coding Agent, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade D
Two or more Medium findings, or a High. Only try it in a sandbox.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
Why this grade
- OBFUSCATION_ENCODED_BLOB Medium
Contains a long base64 shaped string in a file that should be readable.
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi - OBFUSCATION_MINIFIED_PAYLOAD Medium
Contains a very long line with almost no spaces in a script or style file.
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
If you think this grade is wrong, email [email protected] with the entry link and your evidence. We aim to acknowledge within two working days and decide within seven. If we confirm an error, we aim to correct it within 24 hours of confirming it. These are aims, not guarantees.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Pass
No shell or command execution found, and no extra permission was declared.
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address. can reach example.invalid. The description does not name that host.
NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST
desktop-app/dev.mjs, line 28
const req = http.get(url, (res) => {
desktop-app/main/backend.mjs, line 61
const req = http.get(url, (res) => {
desktop-tray/dev.mjs, line 28
const req = http.get(url, (res) => {
Show more
desktop-tray/main/util.mjs, line 11
const req = http.get(url, (res) => {
experiments/chrome-companion/extension/background.mjs, line 51
const response = await fetch(`${state.bridgeUrl}${pathname}`, {
experiments/chrome-companion/extension/background.mjs, line 112
const response = await fetch(`${base}/api/browser/pair`, {
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 620
const res = await fetch(url, options);
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 855
on api(path,options={}){const res=await fetch(path,{...options,headers:{"content-type"
experiments/standalone-client-roadmap/v5.0.0-local-agent-studio/desktop/main.mjs, line 325
const response = await fetch(`http://127.0.0.1:${mcpPort}/healthz`);
server/permission-preview.test.mjs, line 149
const approvedSession = await fetch(`http://127.0.0.1:${dashboardPort}/api/approvals/${sessionRequest.json.id}/approve`, { method: "POST" });
server/permission-preview.test.mjs, line 164
const approvedPersistent = await fetch(`http://127.0.0.1:${dashboardPort}/api/approvals/${persistentRequest.json.id}/approve`, { method: "POST" });
server/test-browser-preview.mjs, line 32
const response = await fetch(`http://127.0.0.1:${port}/healthz`);
server/test-hardening.mjs, line 114
await fetch("http://127.0.0.1:19001/healthz", {
server/test-hardening.mjs, line 124
await fetch("http://127.0.0.1:19001/healthz", { headers: { "user-agent": "manual-health-check" } });
server/test-hardening.mjs, line 128
const evil = await fetch("http://127.0.0.1:19001/mcp", {
server/test-hardening.mjs, line 144
const metrics = await (await fetch("http://127.0.0.1:19002/metrics")).json();
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
desktop-app/ui/src/PermissionPanel.tsx, line 136
placeholder=".env, secrets/**"
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 196
openai_key_present: Boolean(process.env.OPENAI_API_KEY),
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 197
anthropic_key_present: Boolean(process.env.ANTHROPIC_API_KEY),
Show more
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 205
{ id: "openai", name: "OpenAI Responses API", enabled: enabled.has("openai"), ready: Boolean(process.env.OPENAI_API_KEY) },
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 206
{ id: "anthropic", name: "Anthropic Messages API", enabled: enabled.has("anthropic"), ready: Boolean(process.env.ANTHROPIC_API_KEY) },
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 286
if (!process.env.OPENAI_API_KEY) throw new Error("OPENAI_API_KEY is not set");
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 298
authorization: `Bearer ${process.env.OPENAI_API_KEY}`
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 321
if (!process.env.ANTHROPIC_API_KEY) throw new Error("ANTHROPIC_API_KEY is not set");
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 330
"x-api-key": process.env.ANTHROPIC_API_KEY,
scripts/local-coding-agent.mjs, line 867
3. Preserve my local config, tunnel-client, tools/profiles, .env files, reports, and server/data.
scripts/permission-cli.test.mjs, line 36
const added = run(["permissions", "add-root", "default", extra, "edit", "--deny", ".env,secrets/**"]);
scripts/permission-cli.test.mjs, line 38
assert.deepEqual(added.root.deny, [".env", "secrets/**"]);
scripts/release-public-gate.mjs, line 20
["local configuration", (file) => /(^|\/)(config\.json|permission-profiles\.json|\.env)$/i.test(file)]
.env.example, line 1
# Copy to .env or set these in your shell before `npm start`.
.env.example, line 2
# (.env is gitignored - never commit real values.)
.gitignore, line 1
# ---- Secrets / credentials (NEVER commit) ----
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Concern
contains a minified payload. contains an encoded blob in a file that should be readable.
OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD
experiments/standalone-client-roadmap/shared/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
experiments/standalone-client-roadmap/v4.5.0-pro-local-client-mvp/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
experiments/standalone-client-roadmap/v4.6.0-pro-model-router/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
Show more
experiments/standalone-client-roadmap/v4.7.0-pro-workspace-profiles/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
experiments/standalone-client-roadmap/v4.8.0-pro-agent-studio-ui/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
experiments/standalone-client-roadmap/v4.9.0-pro-packaging/standalone-app.mjs, line 819
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
experiments/standalone-client-roadmap/v5.0.0-local-agent-studio/standalone-app.mjs, line 1648
*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--text);font:14px/1.45 system-ui,-apple-system,Segoe UI,sans-serif}header{display:flex;align-items:center;justi
server/server.mjs, line 1
// Local Coding Agent
experiments/standalone-client-roadmap/v5.0.0-local-agent-studio/integrity-manifest.json, line 2
"payload": "eyJzY2hlbWFWZXJzaW9uIjoxLCJwcm9kdWN0IjoibG9jYWwtYWdlbnQtc3R1ZGlvIiwidmVyc2lvbiI6InY1LjAuMCIsImNyZWF0ZWRBdCI6IjIwMjYtMDgtMTNUMTQ6MTE6MzAuNzQyWiIsImZpbGVzIjpbeyJwYXRoIjoi
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit e145e8aa3a7d. can reach a host that is not written as a fixed address. can reach example.invalid. The description does not name that host. reads a credential or environment file. contains a minified payload. contains an encoded blob in a file that should be readable.
Date and source
Date checked:
github.com
Commit graded: e145e8aa3a7db40245fe6a0efa3854d13e377a1b
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.