{"name":"io.github.tydude001/proofcut","slug":"tydude001-proofcut","title":"proofcut","description":"Local-first AI video editor: recordings to a finished film, cut by transcript, then verified","url":"https://mcp.market/server/tydude001-proofcut","rating":null,"grade":"C","score":64,"certified":false,"status":"active","category":"media","tags":["media"],"presence":{"score":0,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/tydude001/proofcut","website":"https://github.com/tydude001/proofcut/blob/main/docs/DEMO.md","version":"0.36.0","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"proofcut","version":"0.36.0","runtimeHint":"uvx","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":64,"grade":"C","scanned_at":"2026-09-18T00:16:06.248Z","report":{"scannerVersion":"0.1.2","scannedAt":"2026-09-18T00:16:06.167Z","components":{"code":{"score":3,"max":25,"notes":["53 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":15,"max":15,"notes":["only the listing description was available"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"proofcut-0.36.0/src/proofcut/_vlm_worker.py: … torch_dtype=torch.bfloat16, ).eval() processor = AutoProcessor.from_pre…"},{"id":"env.dump","severity":"high","component":"code","title":"Whole environment serialized (possible credential exfil)","evidence":"proofcut-0.36.0/src/proofcut/install.py: …ind for any of `binaries`.\"\"\" env = dict(os.environ) if lib_dir is not None: env…"},{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"proofcut-0.36.0/src/proofcut/webui.py: …s the honest thing to print — printing `http://0.0.0.0:8710/` hands out an address nothing can d…"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"proofcut","version":"0.36.0","found":true,"dependencyCount":3,"publishedAt":"2026-09-17T17:52:57.380609Z","repositoryUrl":"https://github.com/tydude001/proofcut"}],"repo":{"found":true,"owner":"tydude001","repo":"proofcut","archived":false,"pushedAt":"2026-09-17T21:12:47Z","stars":2,"openIssues":2,"ownerType":"User","ownerCreatedAt":"2026-06-06T09:44:08Z","license":"NOASSERTION"}}}},"grade_history":[{"kind":"restore","fromGrade":"D","toGrade":"C","reason":"score 64: Whole environment serialized (possible credential exfil); eval / new Function used; Network call to a raw IP address","createdAt":"2026-09-18T00:16:06.971Z"}],"reviews":[]}