{"name":"io.github.mythos-agent/mythos-agent","slug":"mythos-agent","title":null,"description":"Open-source AI security agent: SAST, DAST, and policy-as-code over MCP.","url":"https://mcp.market/server/mythos-agent","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"ai","tags":["ai","security"],"presence":{"score":31,"stars":44,"forks":12,"downloads_week":71,"last_push_at":"2026-05-23T09:18:11.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mythos-agent/mythos-agent","website":null,"version":"4.0.1","remotes":[],"packages":[{"registryType":"npm","identifier":"mythos-agent","version":"4.0.1","transport":{"type":"stdio"},"runtimeArguments":[{"value":"mcp","type":"positional","valueHint":"mcp"}]}],"tools":[],"scan":{"score":65,"grade":"C","scanned_at":"2026-09-27T21:52:22.623Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T21:52:22.570Z","components":{"code":{"score":15,"max":25,"notes":["305 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 128 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/agent/taint-tracker.js: …endering (XSS) - HTTP requests (SSRF) - eval() / dynamic code execution - Redirect UR…"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"dist/scanner/command-injection-scanner.js: …le: \"Command Injection: subprocess with shell=True\", description: \"Python subproce…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"mythos-agent","version":"4.0.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":8,"publishedAt":"2026-04-24T13:19:55.148Z","repositoryUrl":"git+https://github.com/mythos-agent/mythos-agent.git","weeklyDownloads":71}],"repo":{"found":true,"owner":"mythos-agent","repo":"mythos-agent","archived":false,"pushedAt":"2026-05-23T09:18:11Z","stars":44,"forks":12,"openIssues":17,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/277239682?v=4","ownerCreatedAt":"2026-04-18T10:36:56Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/277239682?v=4&s=128","source":"github"},"presence":{"stars":44,"forks":12,"downloadsWeek":71,"license":"MIT","lastPushAt":"2026-05-23T09:18:11.000Z","score":31}}}},"grade_history":[],"reviews":[]}