{"name":"io.github.callstack/agent-device","slug":"callstack-agent-device","title":"agent-device","description":"MCP server for mobile app automation: verify, control, and debug iOS, Android, TV, and desktop apps","url":"https://mcp.market/server/callstack-agent-device","rating":null,"grade":"C","score":55,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":50,"stars":4669,"forks":303,"downloads_week":null,"last_push_at":"2026-09-19T10:11:30.000Z","license":"MIT"},"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/callstack/agent-device","website":null,"version":"0.21.4","remotes":[],"packages":[{"registryType":"npm","identifier":"agent-device","version":"0.21.4","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":55,"grade":"C","scanned_at":"2026-09-19T10:14:40.929Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T10:14:40.912Z","components":{"code":{"score":0,"max":25,"notes":["432 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":9,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/src/interactor.js: …/\\b(light|dark|unsupported|unknown)\\b/i.exec(`${e}\\n${t}`);if(!n)return null;let r=n[1]?.toLow…"},{"id":"obf.base64-exec","severity":"high","component":"code","title":"Base64 decoded then executed","evidence":"dist/src/ios-client.js: …ta:`,e)}if(t.stderr)try{e._handleStderr(Buffer.from(t.stderr,`base64`))}catch(e){x.error(`Failed to decode stderr data:`,e)}t.exitCode!==void 0&&(x.debug(`Simctl execution ${t.id} completed with exit code $…"},{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"dist/src/provider-webdriver.js: …sion,provider:m.awsDeviceFarm,endpoint:`http://127.0.0.1/`,platform:`android`,deviceName:`AWS Dev…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"agent-device","version":"0.21.4","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-09-15T19:22:14.689Z","repositoryUrl":"git+https://github.com/callstack/agent-device.git"}],"repo":{"found":true,"owner":"callstack","repo":"agent-device","archived":false,"pushedAt":"2026-09-19T10:11:30Z","stars":4669,"forks":303,"openIssues":78,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/42239399?v=4","ownerCreatedAt":"2018-08-09T11:10:33Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/42239399?v=4&s=128","source":"github"},"presence":{"stars":4669,"forks":303,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-19T10:11:30.000Z","score":50}}}},"grade_history":[],"reviews":[]}