{"name":"io.github.sophiacave/mcp-shield","slug":"sophiacave-mcp-shield","title":"MCP Shield","description":"Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.","url":"https://mcp.market/server/sophiacave-mcp-shield","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"security","tags":["security"],"presence":{"score":14,"stars":0,"forks":0,"downloads_week":41,"last_push_at":"2026-06-09T20:17:13.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/sophiacave/mcp-shield","website":null,"version":"1.0.7","remotes":[],"packages":[{"registryType":"npm","identifier":"@sophiacave/mcp-shield","version":"1.0.7","transport":{"type":"stdio"}}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-27T12:13:07.253Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T12:13:07.318Z","components":{"code":{"score":15,"max":25,"notes":["5 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 110 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"src/scanner.py: … Command injection via subprocess with shell=True INJ-04: Template injection via forma…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"src/scanner.py: …ec usage\", message=\"eval() or exec() found. If input is user-cont…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@sophiacave/mcp-shield","version":"1.0.7","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-06-09T20:16:56.679Z","repositoryUrl":"git+https://github.com/sophiacave/mcp-shield.git","weeklyDownloads":41}],"repo":{"found":true,"owner":"sophiacave","repo":"mcp-shield","archived":false,"pushedAt":"2026-06-09T20:17:13Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/172539343?v=4","ownerCreatedAt":"2024-06-12T19:06:48Z"},"icon":{"url":"https://avatars.githubusercontent.com/u/172539343?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":41,"license":"MIT","lastPushAt":"2026-06-09T20:17:13.000Z","score":14}}}},"grade_history":[],"reviews":[]}