{"name":"io.github.SepineTam/stata-mcp","slug":"sepinetam-stata-mcp","title":null,"description":"Let LLM help you achieve your regression analysis with Stata","url":"https://mcp.market/server/sepinetam-stata-mcp","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":55,"stars":260,"forks":36,"downloads_week":2112,"last_push_at":"2026-09-18T15:06:18.000Z","license":"AGPL-3.0"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/SepineTam/stata-mcp","website":null,"version":"1.25.0","remotes":[],"packages":[{"registryType":"pypi","identifier":"stata-mcp","version":"1.25.0","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-19T21:32:17.411Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-19T21:32:17.398Z","components":{"code":{"score":8,"max":25,"notes":["94 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"stata_mcp-1.25.0/src/stata_mcp/stata/stata_do/do.py: …n( cmd, shell=True, # Windows Stata requires shell execut…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"stata_mcp-1.25.0/src/stata_mcp/utils/doctor.py: … try: win_result = subprocess.run( f'\"{stata_cli_path}\" /e do \"{temp_do_file}…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"stata-mcp","version":"1.25.0","found":true,"license":"AGPL-3.0","dependencyCount":12,"publishedAt":"2026-09-18T13:10:07.272001Z","repositoryUrl":"https://github.com/sepinetam/mcp-for-stata"}],"repo":{"found":true,"owner":"SepineTam","repo":"stata-mcp","archived":false,"pushedAt":"2026-09-18T15:06:18Z","stars":260,"forks":36,"openIssues":2,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/165980942?v=4","ownerCreatedAt":"2024-04-04T04:01:59Z","license":"AGPL-3.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/165980942?v=4&s=128","source":"registry"},"presence":{"stars":260,"forks":36,"downloadsWeek":2112,"license":"AGPL-3.0","lastPushAt":"2026-09-18T15:06:18.000Z","score":55}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 66: Shell command built from a string (injection risk); subprocess with shell=True","createdAt":"2026-09-19T21:04:04.934Z"}],"reviews":[]}