MCP, MCP server
TridentChain Security
Local-first vulnerability scanner for project dependencies, developer tools, and IDE extensions.
Compatibility: Not stated.
Grade B
Minor issues only, no Medium or High. Worth a quick look at the findings below before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
Rescanned at commit 5ddc31469282, unchanged since the check below.
PERMISSION_DELETE_FILES INSTALL_UNPINNED NETWORK_NO_FIXED_HOST SECRETS_PATH_DOTENV INSTALL_DOCUMENTED_INSTALLER OBFUSCATION_FILE_OVER_READ_CAP
Why this grade
- PERMISSION_DELETE_FILES Low
Contains a call that can delete files.
packaging/scripts/bundle_scanner_runtime.py, line 17
proc = subprocess.run(cmd, cwd=cwd, check=False) - INSTALL_UNPINNED Low
Dependencies use a range or git URL with no lockfile.
docs/CLAUDE_MCP_SETUP.md, line 22
curl -LsSf https://astral.sh/uv/install.sh | sh - NETWORK_NO_FIXED_HOST Low
Makes a network call whose host is not written as a fixed address.
scanner/reports/comparison.py, line 57
resp = requests.post( - SECRETS_PATH_DOTENV Low
Mentions a .env file.
apps/desktop/src/main/main.js, line 160
const candidates = [path.join(resolveRepoRoot(), ".env")]; - INSTALL_DOCUMENTED_INSTALLER Note
Documentation shows an installer that pipes a download into a shell.
docs/CLAUDE_MCP_SETUP.md, line 22
curl -LsSf https://astral.sh/uv/install.sh | sh - OBFUSCATION_FILE_OVER_READ_CAP Note
A file was over the read cap and was not fully read.
reports/combined_report.html, line 1
<!doctype html>
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
can delete files.
PERMISSION_DELETE_FILES
packaging/scripts/bundle_scanner_runtime.py, line 17
proc = subprocess.run(cmd, cwd=cwd, check=False)
packaging/scripts/bundle_scanner_runtime.py, line 30
shutil.rmtree(scanner_bundle)
packaging/scripts/bundle_scanner_runtime.py, line 32
shutil.rmtree(python_bundle)
Show more
packaging/validation/validate_zero_install.py, line 37
proc = subprocess.run(cmd, cwd=repo_root, check=False, capture_output=True, text=True)
scanner/reports/comparison.py, line 15
proc = subprocess.run(
scanner/reports/stakeholder.py, line 25
proc = subprocess.run(
scanner/reports/vscode_comparison.py, line 47
proc = subprocess.run(
scanner/scanners/system.py, line 100
result = subprocess.run(
scanner/scanners/system.py, line 236
result = subprocess.run(
scanner/scanners/system.py, line 255
result = subprocess.run(
Install and update
Concern
dependencies are not pinned. The docs document an installer that pipes a download into a shell. README documents an installer that pipes a download into a shell.
INSTALL_UNPINNED INSTALL_DOCUMENTED_INSTALLER
docs/CLAUDE_MCP_SETUP.md, line 22
curl -LsSf https://astral.sh/uv/install.sh | sh
integrations/mcp/README.md, line 13
curl -LsSf https://astral.sh/uv/install.sh | sh
requirements.txt, line 1
requests>=2.31.0
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
scanner/reports/comparison.py, line 57
resp = requests.post(
scanner/reports/comparison.py, line 439
osv_resp = requests.post(
scanner/reports/stakeholder.py, line 52
resp = requests.post(
Show more
scanner/reports/vscode_comparison.py, line 31
resp = requests.post(
scanner/reports/vscode_comparison.py, line 88
resp = requests.post(
scanner/sources/epss.py, line 29
response = requests.get(
scanner/sources/ghsa.py, line 210
response = requests.post(
scanner/sources/ghsa.py, line 237
response = requests.post(
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
apps/desktop/src/main/main.js, line 160
const candidates = [path.join(resolveRepoRoot(), ".env")];
apps/desktop/src/main/main.js, line 162
candidates.push(path.join(path.dirname(app.getPath("exe")), ".env"));
scanner/main.py, line 91
env_file = Path(__file__).resolve().parent.parent / ".env"
Show more
scanner/sources/nvd.py, line 158
logger.info("NVD: no API key - using slow rate limit (%.1fs/req). Set NVD_API_KEY in .env for 10x faster scans.", delay)
.dockerignore, line 33
.publish-secrets
.env.example, line 2
# Copy this file to .env and fill in your values.
.env.example, line 3
# The .env file is auto-loaded at startup and should NOT be committed to git.
.gitignore, line 1
# Environment secrets
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read.
OBFUSCATION_FILE_OVER_READ_CAP
reports/combined_report.html, line 1
<!doctype html>
reports/competitive_analysis.html, line 1
<!doctype html>
reports/vulnerabilities.html, line 1
<!doctype html>
Show more
scanner/combined_report.html, line 1
<!doctype html>
scanner/competitive_all_report.json, line 1
{
scanner/competitive_analysis.html, line 1
<!doctype html>
scanner/system_report.json, line 1
{
scanner/vscode_report.json, line 1
{
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 5ddc31469282. can delete files. dependencies are not pinned. The docs document an installer that pipes a download into a shell. README documents an installer that pipes a download into a shell. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read.
Date and source
Date checked:
github.com
Commit graded: 5ddc3146928235490eaed6f4bc2f07440fb4d54d
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.