{"name":"io.github.tmill313/shopbuddy","slug":"tmill313-shopbuddy","title":null,"description":"Safe Shopify theme changes for AI agents: staging, validation, visual review, approval, rollback.","url":"https://mcp.market/server/tmill313-shopbuddy","rating":null,"grade":"B","score":84,"certified":false,"status":"active","category":"ecommerce","tags":["ecommerce"],"presence":{"score":30,"stars":0,"forks":0,"downloads_week":26,"last_push_at":"2026-09-02T15:08:13.000Z","license":"MIT"},"uptime":{"percent":100,"checks":28,"ok":28,"last_checked_at":"2026-11-04T10:25:39.605Z","last_ok_at":"2026-11-04T10:25:39.605Z","latency_ms":387},"claimed":false,"transport":"mixed","callable_via_gateway":true,"default_price_micros":0,"repository":"https://github.com/tmill313/shopbuddy-plugin","website":"https://getshopbuddy.vercel.app","version":"0.3.1","remotes":[{"type":"streamable-http","url":"https://getshopbuddy.vercel.app/api/mcp"}],"packages":[{"registryType":"npm","identifier":"shopbuddy","version":"0.3.0","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}],"environmentVariables":[{"description":"Platform URL","name":"SHOPBUDDY_API_URL"},{"description":"API key from the platform's Install page","isSecret":true,"name":"SHOPBUDDY_API_KEY"}]}],"tools":[],"scan":{"score":84,"grade":"B","scanned_at":"2026-09-27T21:26:47.437Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T21:26:47.407Z","components":{"code":{"score":13,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 156ms (auth required)"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (endpoint requires auth); not counted"]},"auth":{"score":15,"max":15,"notes":["OAuth resource metadata advertised on 401"]},"maintenance":{"score":15,"max":15,"notes":["last push 25 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/index.js: …== \"win32\" ? 'start \"\"' : \"xdg-open\"; exec(`${cmd} \"${url}\"`, () => { }); } async function d…"}],"inputs":{"probes":[{"url":"https://getshopbuddy.vercel.app/api/mcp","reachable":true,"authRequired":true,"latencyMs":156,"authScheme":"oauth"}],"packages":[{"registryType":"npm","identifier":"shopbuddy","version":"0.3.0","found":true,"license":"UNLICENSED","hasInstallScripts":false,"dependencyCount":9,"publishedAt":"2026-09-02T14:54:53.038Z","repositoryUrl":"git+https://github.com/tmill313/shopbuddy.git","weeklyDownloads":26}],"repo":{"found":true,"owner":"tmill313","repo":"shopbuddy-plugin","archived":false,"pushedAt":"2026-09-02T15:08:13Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/35041963?v=4","ownerCreatedAt":"2018-01-02T19:10:35Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/35041963?v=4&s=128","source":"registry"},"presence":{"stars":0,"forks":0,"downloadsWeek":26,"license":"MIT","lastPushAt":"2026-09-02T15:08:13.000Z","score":30}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"B","reason":"score 84: Shell command built from a string (injection risk)","createdAt":"2026-09-27T21:26:47.838Z"}],"reviews":[]}