Mmcp.market

Is Open Eagle Eye MCP server safe?

Yes, with the usual care.

B74/100grade B

Safe to use. Minor gaps such as a missing repository or slower maintenance.

What to know before installing
  • highShell command built from a string (injection risk)

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan6 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highShell command built from a string (injection risk)exec.shell-concat
    src/github.js: …dy, 'utf8'); try { const result = execSync( `gh issue create --repo ${GITHUB_REPO} --title ${JSON.stringify(title)} --body-file ${JSON.stringify(tmpFile)} --label ${JSON.stringify(label)}`, { encodin…
Overall 74/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what Open Eagle Eye does

  • Japan Seasons
    Live Japan seasonal travel MCP: sakura, autumn leaves, flowers, festivals, fruit farms, weather.
    A
  • Singapore MCP by Olano
    Singapore public data, transport, rail, property, business, economy, weather, and analytics.
    B
  • Weather Markets Edge Desk
    Kalshi weather markets: live daily-high temperature edges, plus EV, Kelly and base-rate tools.
    B

Open Eagle Eye reviews, tools and install