Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/index.js:1065
- Evidence
const cfg = resolveInstances(process.env);
Security audit
AdGuard
Security checks across malware telemetry and agentic risk
Overview
No artifact-backed suspicious behavior could be established from the available review, but the workspace shell failed before files could be read.
Treat this as an incomplete low-confidence review: the sandbox prevented reading metadata.json and artifact files, so installation should wait for a successful artifact inspection.
VirusTotal
VirusTotal engine telemetry is currently stale for this artifact.
Static analysis
Detected: suspicious.env_credential_access
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/mcp-server.js:1036
- Evidence
var cfg = resolveInstances(process.env);