{"name":"io.github.Q00/ouroboros","slug":"q00-ouroboros","title":"Ouroboros","description":"Pins an acceptance spec; the verify command and expected output never enter the success contract.","url":"https://mcp.market/server/q00-ouroboros","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":74,"stars":6077,"forks":611,"downloads_week":28838,"last_push_at":"2026-09-21T14:35:02.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Q00/ouroboros","website":null,"version":"0.51.5","remotes":[],"packages":[{"registryType":"pypi","identifier":"ouroboros-ai","version":"0.51.5","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"value":"ouroboros-ai[mcp]","type":"named","name":"--from"},{"value":"mcp==2.0.0","type":"named","name":"--with"},{"value":"ouroboros","type":"positional","valueHint":"ouroboros"}],"packageArguments":[{"value":"mcp","type":"positional","valueHint":"mcp"},{"value":"serve","type":"positional","valueHint":"serve"},{"value":"claude-cli","type":"named","name":"--runtime"}]}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-23T11:55:03.191Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-23T11:55:03.179Z","components":{"code":{"score":8,"max":25,"notes":["619 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 2 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"ouroboros_ai-0.51.5/src/ouroboros/cli/commands/mcp.py: …_cmd = 'python3 -c \"import os,json,sys; json.dump(dict(os.environ), sys.stdout)\"' if shell_name =…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"ouroboros_ai-0.51.5/src/ouroboros/mcp/server/security.py: …, \"os.system\", \"eval(\", \"exec(\", \"com…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"ouroboros-ai","version":"0.51.5","found":true,"weeklyDownloads":28838,"dependencyCount":28,"publishedAt":"2026-08-14T09:40:58.842791Z","repositoryUrl":"https://github.com/Q00/ouroboros"}],"repo":{"found":true,"owner":"Q00","repo":"ouroboros","archived":false,"pushedAt":"2026-09-21T14:35:02Z","stars":6077,"forks":611,"openIssues":105,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/31264094?v=4","ownerCreatedAt":"2017-08-23T02:01:51Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/31264094?v=4&s=128","source":"github"},"presence":{"stars":6077,"forks":611,"downloadsWeek":28838,"license":"MIT","lastPushAt":"2026-09-21T14:35:02.000Z","score":74}}}},"grade_history":[],"reviews":[]}