{"name":"io.github.AndrewKochulab/sim-mirror","slug":"andrewkochulab-sim-mirror","title":"SimMirror","description":"Mirror and drive the iOS Simulator: token-efficient UI snapshots, gestures and a live viewer.","url":"https://mcp.market/server/andrewkochulab-sim-mirror","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"productivity","tags":["productivity"],"presence":{"score":35,"stars":2,"forks":0,"downloads_week":279,"last_push_at":"2026-09-17T21:19:55.000Z","license":"Apache-2.0"},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/AndrewKochulab/sim-mirror","website":"https://github.com/AndrewKochulab/sim-mirror#readme","version":"1.2.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"sim-mirror","version":"1.2.0","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-19T00:49:00.427Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:49:00.396Z","components":{"code":{"score":8,"max":25,"notes":["184 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"sim_mirror-1.2.0/src/sim_mirror/cli/context.py: …) -> CliContext: return cls(env=dict(os.environ), cwd=Path.cwd(), stdout=sys.stdout, std…"},{"id":"obf.hex-density","severity":"medium","component":"code","title":"Heavily hex-escaped string (obfuscation)","evidence":"sim_mirror-1.2.0/src/sim_mirror/testing/fakes.py: …r set, then an IDR slice. KEY_FRAME = b\"\\x00\\x00\\x00\\x01\\x67\\x64\\x00\\x28\\x00\\x00\\x00\\x01\\x68\\xee\\x3c\\x80\\x00\\x00\\x00\\x01\\x65\\x88\\x84\" class FakeEngine: \"\"\"A running d…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"sim-mirror","version":"1.2.0","found":true,"weeklyDownloads":279,"license":"Apache-2.0","dependencyCount":7,"publishedAt":"2026-09-17T13:50:03.854616Z","repositoryUrl":"https://github.com/AndrewKochulab/sim-mirror"}],"repo":{"found":true,"owner":"AndrewKochulab","repo":"sim-mirror","archived":false,"pushedAt":"2026-09-17T21:19:55Z","stars":2,"forks":0,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/23005098?v=4","ownerCreatedAt":"2016-10-22T22:37:09Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/23005098?v=4&s=128","source":"github"},"presence":{"stars":2,"forks":0,"downloadsWeek":279,"license":"Apache-2.0","lastPushAt":"2026-09-17T21:19:55.000Z","score":35}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 66: Whole environment serialized (possible credential exfil); Heavily hex-escaped string (obfuscation)","createdAt":"2026-09-19T00:27:03.647Z"}],"reviews":[]}