{"name":"io.github.sassyconsultingllc/sassymcp","slug":"sassyconsultingllc-sassymcp","title":"SassyMCP","description":"One MCP server that replaces 75+ — 274 tools in a single exe, smart-loaded.","url":"https://mcp.market/server/sassyconsultingllc-sassymcp","rating":null,"grade":"C","score":58,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":25,"stars":4,"forks":2,"downloads_week":null,"last_push_at":"2026-09-19T02:52:51.000Z","license":"NOASSERTION"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sassyconsultingllc/SassyMCP","website":"https://sassyconsultingllc.com/store","version":"1.15.1","remotes":[],"packages":[{"registryType":"pypi","identifier":"sassymcp","version":"1.15.1","transport":{"type":"stdio"}},{"registryType":"mcpb","identifier":"https://github.com/sassyconsultingllc/SassyMCP/releases/download/v1.15.1/sassymcp-v1.15.1.mcpb","fileSha256":"06366a120d696ab893fe15814c14f02a13fcdcf2db9775034ab3affecbe62780","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":58,"grade":"C","scanned_at":"2026-09-19T10:18:06.026Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T10:18:05.996Z","components":{"code":{"score":3,"max":25,"notes":["77 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"sassymcp-1.15.1/sassymcp/modules/persona.py: …for linting, pytest for testing - Never eval() on external input **JavaScript/TypeSc…"},{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"sassymcp-1.15.1/sassymcp/modules/session.py: … subprocess spawner. Argv-list form (no shell=True) # is the safe-by-default option — no s…"},{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"sassymcp-1.15.1/sassymcp/overlay/mesh.py: …NODE_PATH or SASSYMCP_REPO.\"} env = dict(os.environ) env.setdefault(\"HERMES_AUTORUN\", \"0…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"sassymcp","version":"1.15.1","found":true,"license":"Proprietary","dependencyCount":25,"publishedAt":"2026-09-14T22:59:46.068176Z"}],"repo":{"found":true,"owner":"sassyconsultingllc","repo":"SassyMCP","archived":false,"pushedAt":"2026-09-19T02:52:51Z","stars":4,"forks":2,"openIssues":2,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/226345833?v=4","ownerCreatedAt":"2025-08-13T15:22:32Z","license":"NOASSERTION"},"icon":{"url":"https://sassyconsultingllc.com/favicon.ico","source":"site","width":48,"height":48},"presence":{"stars":4,"forks":2,"downloadsWeek":null,"license":"NOASSERTION","lastPushAt":"2026-09-19T02:52:51.000Z","score":25}}}},"grade_history":[],"reviews":[]}