MCP, MCP server
submail
submail, an MCP server listed in the PlugVet directory.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
NETWORK_HOST_FROM_INPUT
Why this grade
- NETWORK_HOST_FROM_INPUT Medium
A file takes a URL or endpoint as input and has no fixed host list.
deploy.sh, line 164
if docker compose exec -T web wget -q -O /dev/null http://127.0.0.1:8080/health >/dev/null 2>&1; then
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
apps/api/src/backup.ts, line 28
fs.rmSync(backupPath, { force: true });
apps/api/src/restore.ts, line 86
for (const artifact of artifacts) fs.rmSync(artifact, { force: true });
apps/api/src/restore.ts, line 131
fs.rmSync(previousPath, { force: true });
Show more
apps/api/src/restore.ts, line 136
for (const artifact of provisionalCorruptArtifacts) fs.rmSync(artifact, { force: true });
apps/api/src/restore.ts, line 144
fs.rmSync(`${destinationPath}${suffix}`, { force: true });
apps/api/src/restore.ts, line 160
if (!replacementCompleted) fs.rmSync(temporaryPath, { force: true });
apps/api/src/runtime-lock.ts, line 157
fs.rmSync(lockPath, { force: true });
apps/api/src/runtime-lock.ts, line 197
fs.unlinkSync(lockPath);
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Serious
accepts a host from input, with no fixed list in this file.
NETWORK_HOST_FROM_INPUT
deploy.sh, line 164
if docker compose exec -T web wget -q -O /dev/null http://127.0.0.1:8080/health >/dev/null 2>&1; then
deploy.sh, line 178
PDF_WORKER_HEADERS="$(docker compose exec -T web wget -S -O /dev/null http://127.0.0.1:8080/vendor/pdf/pdf.worker.mjs 2>&1)"
apps/api/src/integrations.ts, line 263
response = await fetch(chatCompletionUrl(settings.base_url), {
Show more
apps/api/src/integrations.ts, line 443
response = await fetch(GOOGLE_TRANSLATE_ENDPOINT, {
apps/api/src/integrations.ts, line 477
response = await fetch(settings.endpoint, {
apps/api/src/mail.ts, line 219
for await (const message of client.fetch(fetchRange, { uid: true, envelope: true, flags: true, labels: gmailLabels, size: true }, { uid: useUidRange })) {
apps/api/src/mail.ts, line 312
for await (const message of client.fetch("1:*", { uid: true, flags: true, labels: gmailLabels })) {
apps/mcp/src/index.ts, line 33
const response = await fetch(`${apiBaseUrl}${path}`, {
apps/web/src/main.tsx, line 378
const response = await fetch(`${apiBaseUrl}${path}`, {
apps/web/src/main.tsx, line 1086
const response = await fetch(`${apiBaseUrl}/api/attachments/${encodeURIComponent(attachment.id)}/content`, {
scripts/real-ai-check.mjs, line 27
const response = await fetch(completionUrl(input.endpoint), {
scripts/real-ai-check.mjs, line 77
const response = await fetch(modelsUrl, {
docker-compose.yml, line 49
test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:8787/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
docker-compose.yml, line 119
test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3000/health').then(r=>{if(!r.ok)process.exit(1)}).catch(()=>process.exit(1))"]
Secrets
Concern
reads a credential or environment file.
SECRETS_ENV_READ SECRETS_PATH_DOTENV
deploy.sh, line 5
ENV_FILE="${ROOT_DIR}/.env"
deploy.sh, line 6
ENV_EXAMPLE="${ROOT_DIR}/.env.example"
deploy.sh, line 134
printf '错误：外部 MySQL 需在 .env 设置 SUBMAIL_MYSQL_URL，或同时设置 HOST/PORT/DATABASE/USER/PASSWORD。\n' >&2
Show more
deploy.sh, line 193
printf '敏感配置已保存在权限为 600 的 .env 中，请勿公开或提交。\n'
apps/api/src/config.ts, line 8
dotenv.config({ path: path.resolve(moduleDir, "../.env") });
apps/api/src/config.ts, line 46
mysqlPassword: process.env.SUBMAIL_MYSQL_PASSWORD ?? "",
apps/api/src/config.ts, line 50
secret: process.env.SUBMAIL_SECRET ?? "dev-secret-change-me",
apps/api/src/config.ts, line 53
adminPassword: process.env.SUBMAIL_ADMIN_PASSWORD,
apps/api/src/config.ts, line 54
mcpApiKey: process.env.SUBMAIL_MCP_API_KEY,
apps/mcp/src/index.ts, line 456
const apiKey = process.env.SUBMAIL_MCP_API_KEY?.trim();
scripts/secure-local-data.mjs, line 8
const envPath = path.join(apiDir, ".env");
scripts/secure-local-data.mjs, line 45
if (!value || value.length < 32) throw new Error("apps/api/.env 中的 SUBMAIL_SECRET 必须至少 32 字符");
scripts/secure-local-data.mjs, line 79
throw new Error("apps/api/.env 与当前数据库的主密钥指纹不匹配，未修改任何数据");
scripts/secure-local-data.mjs, line 89
const sourceSecret = existingEnvSecret ?? process.env.SUBMAIL_CURRENT_SECRET ?? legacyDevelopmentSecret;
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
package-lock.json, line 1
{
Licence
Note
no licence file found.
LICENCE_MISSING
No file path was stored.
no licence file found.
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 729167dfccf6. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file. a file was over the read cap and was not fully read. no licence file found.
Date and source
Date checked:
github.com
Commit graded: 729167dfccf60f12719680d50be02cec8a14f9d2
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.