{"name":"io.github.bawbel/scanner","slug":"bawbel-scanner-d17094","title":"Bawbel Scanner","description":"Security scanner for MCP servers and skill files. Detects AVE vulnerabilities before production.","url":"https://mcp.market/server/bawbel-scanner-d17094","rating":null,"grade":"B","score":75,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":25,"stars":11,"forks":5,"downloads_week":null,"last_push_at":"2026-09-12T05:07:30.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/bawbel/scanner","website":null,"version":"1.2.3","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"bawbel-scanner","version":"1.2.3","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"description":"File or directory to scan","default":".","type":"named","name":"--path"}]}],"tools":[],"scan":{"score":75,"grade":"B","scanned_at":"2026-09-27T17:07:23.390Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T17:07:23.375Z","components":{"code":{"score":15,"max":25,"notes":["56 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 15 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"bawbel_scanner-1.2.3/pyproject.toml: …# subprocess list args - correct, never shell=True ] severity = \"medium\" # ── Tool: flake…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"bawbel_scanner-1.2.3/scanner/engines/sandbox_engine.py: …, \"AVE-2026-00004\", \"HIGH\", 5.9), (\"eval() code execution\", \"AVE-2026-00004\", \"HI…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"bawbel-scanner","version":"1.2.3","found":true,"license":"Apache-2.0","dependencyCount":26,"publishedAt":"2026-05-23T19:34:19.752334Z","repositoryUrl":"https://github.com/bawbel/scanner"}],"repo":{"found":true,"owner":"bawbel","repo":"scanner","archived":false,"pushedAt":"2026-09-12T05:07:30Z","stars":11,"forks":5,"openIssues":4,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/275841972?v=4","ownerCreatedAt":"2026-04-13T23:26:40Z","license":"NOASSERTION"},"icon":{"url":"https://avatars.githubusercontent.com/u/275841972?v=4&s=128","source":"github"},"presence":{"stars":11,"forks":5,"downloadsWeek":null,"license":"NOASSERTION","lastPushAt":"2026-09-12T05:07:30.000Z","score":25}}}},"grade_history":[],"reviews":[]}