Is NIRA Video Production MCP server safe?
Not recommended.
Hidden from default browsing. Significant findings or unreachable.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
1 medium
- Code scan17 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- mediumsubprocess with shell=True
exec.shell-truenira_video_mcp-1.0.3/tools/ffmpeg_utils.py: …FFmpeg subprocess utilities. Never uses shell=True. """ import asyncio import json import …
Overall 48/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Safer options for the same job
RendobarTransform video, audio and images, and generate media from prompts. FFmpeg, captions, models.not reviewedGrowingA
StudioMeyer VideoVideo production: recording, editing, effects, captions, TTS, screenshots. 8 tools.not reviewedGrowingB- KinocutGuardrailed video editing for AI agents: FFmpeg, captions, effects, Hyperframes, and receipts.not reviewedEstablishedB