{"name":"io.github.sipyourdrink-ltd/bernstein","slug":"sipyourdrink-ltd-bernstein","title":null,"description":"The open-source governance layer for AI agents. Byte-identical run receipts, 40+ adapters, air-gap.","url":"https://mcp.market/server/sipyourdrink-ltd-bernstein","rating":null,"grade":"D","score":52,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":48,"stars":1207,"forks":166,"downloads_week":null,"last_push_at":"2026-09-19T18:21:41.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sipyourdrink-ltd/bernstein","website":"https://bernstein.run","version":"3.19.2","remotes":[],"packages":[{"registryType":"pypi","identifier":"bernstein","version":"3.19.2","transport":{"type":"stdio"}},{"registryType":"oci","identifier":"ghcr.io/sipyourdrink-ltd/bernstein:3.19.2","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":52,"grade":"D","scanned_at":"2026-09-19T19:04:01.307Z","report":{"scannerVersion":"0.1.4","scannedAt":"2026-09-19T19:04:01.290Z","components":{"code":{"score":0,"max":25,"notes":["1500 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"bernstein-3.19.2/.bandit-baseline.json: … cwd=str(cwd),\\n671 shell=True,\\n672 stdout=subprocess.PIP…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"bernstein-3.19.2/.bandit-baseline.json: … try:\\n209 invariant_expr = eval(prop.invariant, {\\\"__builtins__\\\": {}}, …"},{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"bernstein-3.19.2/docker/sandbox/docker-compose.researcher.yaml: …dashboard via the task server itself at http://127.0.0.1:18052/dashboard. volumes: researcher-worksp…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"bernstein-3.19.2/packaging/npm/index.js: …unction which(cmd) { try { return execSync(`command -v ${cmd}`, { encoding: \"utf8\", stdio: [\"pipe…"},{"id":"install.script","severity":"medium","component":"code","title":"npm install lifecycle script present","evidence":"bernstein-3.19.2/packaging/npm/package.json: …in\": \"index.js\" }, \"scripts\": { \"postinstall\": \"node install.js\" }, \"engines\": { …"},{"id":"install.curl-pipe","severity":"high","component":"code","title":"curl | sh in a script","evidence":"bernstein-3.19.2/src/bernstein/adapters/cursor.py: …sor-agent`` binary surface. Install: ``curl https://cursor.com/install -fsS | bash`` (macOS/Linux/WSL). The binary is ``cu…"},{"id":"obf.base64-exec","severity":"high","component":"code","title":"Base64 decoded then executed","evidence":"bernstein-3.19.2/src/bernstein/bridges/browser_rendering.py: …ta.get(\"pdf\", \"\") return base64.b64decode(encoded) async def execute_script(self, url: str, script: str) …"},{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"bernstein-3.19.2/src/bernstein/cli/commands/doctor/backends.py: …r is missing. \"\"\" env = env or os.environ.copy() token = (env.get(\"GITHUB_TOKEN\") or…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"bernstein","version":"3.19.2","found":true,"license":"Apache-2.0","dependencyCount":104,"publishedAt":"2026-09-10T12:47:29.780251Z","repositoryUrl":"https://github.com/sipyourdrink-ltd/bernstein"}],"repo":{"found":true,"owner":"sipyourdrink-ltd","repo":"bernstein","archived":false,"pushedAt":"2026-09-19T18:21:41Z","stars":1207,"forks":166,"openIssues":375,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/271707709?v=4","ownerCreatedAt":"2026-03-28T07:09:12Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/271707709?v=4&s=128","source":"github"},"presence":{"stars":1207,"forks":166,"downloadsWeek":null,"license":"Apache-2.0","lastPushAt":"2026-09-19T18:21:41.000Z","score":48}}}},"grade_history":[],"reviews":[]}