Is io.github.cdeust/hypermnesia-mcp safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highWhole environment serialized (possible credential exfil)
Public scan report
scanner v0.1.2 · 2026-09-18 · same rubric, same numbers if you re-run it
1 high1 medium
- Code scan1261 source files scanned8/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- Tool poisoningonly the listing description was available15/15
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (2)
- highWhole environment serialized (possible credential exfil)
env.dumphypermnesia_mcp-4.23.0/mcp_server/handlers/consolidation/claude_cli.py: …r() if mode == "api": env = dict(os.environ) else: env = {k: v for k, v … - mediumNetwork call to a raw IP address
net.raw-iphypermnesia_mcp-4.23.0/tests_py/infrastructure/test_viz_client.py: …{"ok": True} assert seen["url"] == "http://127.0.0.1:8123/api/x" assert seen["timeout"] == viz…
Overall 73/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON