Agentic Beehive MCP Server

• Analyzed: May 13, 2026, 2:26 AM
• Findings: 1
• Version: 1.0.0
• Hash: d057a161dfb2b4b6badcf2dfde63ebd9176bf789554d89ecde5e642fe1fc9530
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements an orchestration hub for AI agents using SQLite and FastMCP. It contains a potential Server-Side Request Forgery (SSRF) vulnerability in the `colony_poll` tool within `server.py`, which performs unvalidated `httpx.get` requests to user-defined endpoints. While the code appears aligned with its stated purpose of managing external 'colonies' and internal 'branches,' the ability to trigger arbitrary network requests to internal or external infrastructure is a high-risk capability.