Is Void Os MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
Public scan report
scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it
1 medium1 low
- Code scan51 source files scanned; 101 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenanceno repository listed3/15
- Maintainer identityno repository or website to verify2/10
Findings (2)
- mediumsubprocess with shell=True
exec.shell-truevoid_os-0.1.0/src/void_os/view/terminal/_terminal.py: …t, 'utf-8') subprocess.run(command, shell=True, input=terminal_7_utf_8_encode) def wr…
- lowNo source repository listed
maint.no-repo
Overall 57/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what Void Os does
- Pseudolife MemoryPersistent memory for MCP-compatible agents: memory bank, fact cortex, dreams, graph.not reviewedGrowingA
BankMCP™Read-only MCP server for your own bank accounts via Enable Banking. Self-hosted, one user.not reviewedEstablishedA
Beancount.ioQuery, edit, and reconcile a hosted Beancount ledger: BQL, reports, files, and bank imports.not reviewedEstablishedA