{"name":"io.github.Wyrdsekai/researchzosho","slug":"wyrdsekai-researchzosho","title":"ResearchZosho","description":"The research librarian for the rest of us: reads, keeps and questions your sources.","url":"https://mcp.market/server/wyrdsekai-researchzosho","rating":null,"grade":"B","score":72,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":34,"stars":0,"forks":0,"downloads_week":1717,"last_push_at":"2026-09-17T23:44:03.000Z","license":"Apache-2.0"},"claimed":false,"transport":"mixed","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/Wyrdsekai/researchzosho","website":"https://researchzosho.org","version":"0.4.6","remotes":[],"packages":[{"registryType":"npm","identifier":"@wyrdsekai/researchzosho-mcp","version":"0.4.6","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"The library folder (default ~/researchzosho-library)","format":"filepath","name":"RESEARCHZOSHO_LIBRARY"}]},{"registryType":"oci","identifier":"ghcr.io/wyrdsekai/researchzosho:0.4.6","runtimeHint":"docker","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Keep stdin open: the MCP stream","isRequired":true,"type":"named","name":"-i"},{"isRequired":true,"type":"named","name":"--rm"},{"description":"The library folder on the host","isRequired":true,"value":"{library}:/library","variables":{"library":{"description":"Path of the library folder on the host","isRequired":true,"format":"filepath"}},"type":"named","name":"-v"}],"packageArguments":[{"value":"mcp","type":"positional"}]}],"tools":[],"scan":{"score":72,"grade":"B","scanned_at":"2026-09-19T00:28:48.184Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:28:48.126Z","components":{"code":{"score":13,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"bin/index.js: … return 0; const m = /version \"(\\d+)/.exec(`${r.stderr}${r.stdout}`); return m ? parseInt(m[1],…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@wyrdsekai/researchzosho-mcp","version":"0.4.6","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-09-17T23:45:34.340Z","repositoryUrl":"git+https://github.com/Wyrdsekai/researchzosho.git","weeklyDownloads":1717}],"repo":{"found":true,"owner":"Wyrdsekai","repo":"researchzosho","archived":false,"pushedAt":"2026-09-17T23:44:03Z","stars":0,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/309188168?v=4","ownerCreatedAt":"2026-07-25T19:20:56Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/309188168?v=4&s=128","source":"github"},"presence":{"stars":0,"forks":0,"downloadsWeek":1717,"license":"Apache-2.0","lastPushAt":"2026-09-17T23:44:03.000Z","score":34}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"B","reason":"score 78: Shell command built from a string (injection risk)","createdAt":"2026-09-18T00:14:09.554Z"}],"reviews":[]}