{"name":"io.github.VamsiSudhakaran1/release-gate","slug":"vamsisudhakaran1-release-gate","title":null,"description":"Pre-deploy security auditor for AI agent code — the risks generic SAST misses.","url":"https://mcp.market/server/vamsisudhakaran1-release-gate","rating":null,"grade":"C","score":58,"certified":false,"status":"active","category":"devtools","tags":["devtools","ai","security"],"presence":{"score":32,"stars":3,"forks":1,"downloads_week":43,"last_push_at":"2026-09-26T11:21:29.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/VamsiSudhakaran1/release-gate","website":"https://release-gate.com","version":"0.8.4","remotes":[],"packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"release-gate","version":"0.8.4","runtimeHint":"release-gate-mcp","transport":{"type":"stdio"},"environmentVariables":[{"description":"Colon/semicolon-separated directories the server may read under. Defaults to the working directory. The server refuses any path outside these roots (blocks ../, absolute, and symlink escapes).","name":"RG_MCP_ALLOWED_ROOTS"}]}],"tools":[{"name":"analyze_code","description":"Statically analyze a CODE SNIPPET for AI-agent risks (model output reaching eval/exec/pickle, uncapped LLM calls, prompt-injection surfaces).","write_action":false,"price_micros":0,"input_schema":null},{"name":"audit_local_repo","description":"Audit a LOCAL checked-out repo directory for AI-agent code risks.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":58,"grade":"C","scanned_at":"2026-09-26T11:34:55.514Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T11:34:55.589Z","components":{"code":{"score":3,"max":25,"notes":["62 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-true","severity":"medium","component":"code","title":"subprocess with shell=True","evidence":"release_gate-0.8.4/release_gate/agent/client.py: …r handed to a shell for interpretation. shell=True would # let an eval input or a…"},{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"release_gate-0.8.4/release_gate/agent_analysis.py: …EvalRunner().run()` ✘ never flag * `eval(user_input)` / `os.system(cmd)` where `c…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"release_gate-0.8.4/release_gate/verify.py: … r\"|\\bexec\\s*\\([^)]*\\$\\{\" # exec(`...${x}`) — interpolated command ) def …"}],"inputs":{"packages":[{"registryType":"pypi","identifier":"release-gate","version":"0.8.4","found":true,"weeklyDownloads":43,"license":"MIT","dependencyCount":16,"publishedAt":"2026-07-07T10:18:09.536623Z","repositoryUrl":"https://github.com/VamsiSudhakaran1/release-gate"}],"repo":{"found":true,"owner":"VamsiSudhakaran1","repo":"release-gate","archived":false,"pushedAt":"2026-09-26T11:21:29Z","stars":3,"forks":1,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/142974384?v=4","ownerCreatedAt":"2023-08-23T07:27:14Z","license":"MIT"},"icon":{"url":"data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAzMiAzMiI+PHJlY3QgeD0iMSIgeT0iMSIgd2lkdGg9IjMwIiBoZWlnaHQ9IjMwIiByeD0iNy42IiBmaWxsPSIjMEIwQjBGIi8+PHJlY3QgeD0iOS43IiB5PSIxMiIgd2lkdGg9IjIuNiIgaGVpZ2h0PSIxMiIgcng9IjEuMiIgZmlsbD0iI0Y0RjFFOSIvPjxyZWN0IHg9IjE5LjciIHk9IjEyIiB3aWR0aD0iMi42IiBoZWlnaHQ9IjEyIiByeD0iMS4yIiBmaWxsPSIjRjRGMUU5Ii8+PHJlY3QgeD0iOCIgeT0iOC40IiB3aWR0aD0iMTYiIGhlaWdodD0iMi45IiByeD0iMS40NSIgZmlsbD0iI0M4QTI0QiIvPjwvc3ZnPg==","source":"site"},"presence":{"stars":3,"forks":1,"downloadsWeek":43,"license":"MIT","lastPushAt":"2026-09-26T11:21:29.000Z","score":32}}}},"grade_history":[],"reviews":[]}