com.alpinedataworks/adw-intelligence-server

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  fail25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  tool "adw.feedback" description: text addressed to the model rather than describing a capability.

• Supply chain

  warn25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  no resolvable repository linked to the package (provenance unverifiable)

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  unscannable15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No source files, package.json, or pyproject were fetched; cannot infer capability scope.

• Version behavior

  fail10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 0.3.5 (patch bump): new tool "adw.catalog" appeared; new tool "adw.sample" touches a sensitive surface (email/exec/net/fs); new tool "adw.feedback" appeared; new tool "adw.health_risk" appeared; new tool "adw.obesity_risk" appeared; new tool "adw.air_quality_risk" appeared; new tool "adw.county_cancer" appeared; new tool "adw.county_water" appeared; new tool "adw.county_mortality" appeared; new tool "adw.county_sdoh" appeared; new tool "adw.adw_001" appeared; new tool "adw.adw_002" appeared; new tool "adw.adw_003" appeared; new tool "adw.adw_004" appeared; new tool "adw.adw_005" appeared; new tool "adw.adw_006" appeared; new tool "adw.adw_007" appeared; new tool "adw.adw_008" appeared; new tool "adw.adw_009" appeared; new tool "adw.adw_010" appeared; new tool "adw.adw_015" appeared; new tool "adw.adw_101" appeared; new tool "adw.adw_102" appeared; new tool "adw.adw_103" appeared; new tool "adw.adw_104" appeared; new tool "adw.adw_105" appeared; new tool "adw.adw_106" appeared; new tool "adw.adw_016" appeared; new tool "adw.adw_017" appeared; new tool "adw.adw_018" appeared; new tool "adw.adw_019" appeared; new tool "adw.adw_020" appeared; new tool "adw.adw_021" appeared; new tool "adw.adw_023" appeared; new tool "adw.adw_024" appeared; new tool "adw.adw_026" appeared; new tool "adw.adw_027" appeared; new tool "adw.adw_028" appeared; new tool "adw.adw_029" appeared; new tool "adw.adw_030" appeared; new tool "adw.adw_031" appeared; new tool "adw.adw_046" appeared; new tool "adw.adw_053" appeared; new tool "adw.adw_054" appeared; new tool "adw.adw_055" appeared; new tool "adw.adw_056" appeared; new tool "adw.adw_032" appeared; new tool "adw.adw_033" appeared; new tool "adw.adw_201" appeared; new tool "adw.adw_202" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_204" appeared; new tool "adw.adw_205" appeared; new tool "adw.adw_037" appeared; new tool "adw.adw_038" appeared; new tool "adw.adw_040" appeared; new tool "adw.adw_042" appeared; new tool "adw.adw_044" appeared; new tool "adw.adw_045" appeared; new tool "adw.adw_047" appeared; new tool "adw.adw_049" appeared; new tool "adw.adw_050" appeared; new tool "adw.adw_052" appeared; new tool "adw.adw_067" appeared; new tool "adw.adw_034" appeared; new tool "adw.adw_076" appeared; new tool "adw.adw_071" appeared; new tool "adw.adw_072" appeared; new tool "adw.adw_073" appeared; new tool "adw.adw_110" appeared; new tool "adw.adw_112" appeared; new tool "adw.adw_116" appeared; new tool "adw.adw_117" appeared; new tool "adw.adw_041" appeared; new tool "adw.adw_062" appeared; new tool "adw.adw_075" appeared; new tool "adw.adw_120" appeared; new tool "adw.adw_121" appeared; new tool "adw.adw_122" appeared; new tool "adw.adw_123" appeared; new tool "adw.adw_124" appeared; new tool "adw.adw_125" appeared; new tool "adw.adw_126" appeared; new tool "adw.adw_127" appeared; new tool "adw.adw_128" appeared; new tool "adw.adw_129" appeared; new tool "adw.adw_130" appeared; new tool "adw.adw_131" appeared; new tool "adw.adw_132" appeared; new tool "adw.adw_133" appeared; new tool "adw.adw_206" appeared; new tool "adw.adw_207" appeared; new tool "adw.adw_208" appeared; new tool "adw.adw_210" appeared; new tool "adw.adw_233" appeared; new tool "adw.adw_234" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_232" appeared; new tool "adw.adw_238" appeared; new tool "adw.adw_209" appeared; new tool "adw.adw_213" appeared; new tool "adw.adw_212" appeared; new tool "adw.adw_217" appeared; new tool "adw.adw_219" appeared; new tool "adw.adw_220" appeared; new tool "adw.adw_250" appeared; new tool "adw.adw_251" appeared; new tool "adw.adw_215" appeared; new tool "adw.adw_252" appeared; new tool "adw.adw_223" appeared; new tool "adw.adw_253" appeared; new tool "adw.adw_254" appeared; new tool "adw.adw_255" appeared; new tool "adw.adw_256" appeared; new tool "adw.adw_257" appeared; new tool "adw.adw_258" appeared; new tool "adw.adw_259" appeared; new tool "adw.adw_260" appeared; new tool "adw.adw_261" appeared; new tool "adw.adw_262" appeared; new tool "adw.adw_263" appeared; new tool "adw.adw_264" appeared; new tool "adw.adw_310" appeared; new tool "adw.adw_311" appeared; new tool "adw.adw_313" appeared; new tool "adw.adw_314" appeared; new tool "adw.adw_347" appeared; new tool "adw.adw_335" appeared; new tool "adw.adw_339" appeared; new tool "adw.adw_312" appeared; new tool "adw.adw_355" appeared; new tool "adw.adw_348" appeared; new tool "adw.adw_349" appeared; new tool "adw.adw_354" appeared; new tool "adw.adw_377" appeared; new tool "adw.adw_382" appeared; new tool "adw.adw_356" appeared; new tool "adw.adw_357" appeared; new tool "adw.adw_383" appeared; new tool "adw.adw_384" appeared; new tool "adw.adw_385" appeared; new tool "adw.adw_386" appeared; new tool "adw.adw_387" appeared; new tool "adw.adw_388" appeared; new tool "adw.adw_390" appeared; new tool "adw.adw_391" appeared; new tool "adw.adw_392" appeared; new tool "adw.adw_393" appeared; new tool "adw.adw_394" appeared; new tool "adw.adw_395" appeared; new tool "adw.adw_397" appeared; new tool "adw.adw_400" appeared; new tool "adw.adw_401" appeared; new tool "adw.adw_402" appeared; new tool "adw.adw_404" appeared; new tool "adw.adw_405" appeared; new tool "adw.adw_115" appeared; new tool "adw.adw_408" appeared; new tool "adw.adw_409" appeared; new tool "adw.adw_411" appeared; new tool "adw.adw_412" appeared; new tool "adw.adw_413" appeared; new tool "adw.adw_414" appeared; new tool "adw.adw_415" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_416" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_417" appeared; new tool "adw.adw_418" appeared; new tool "adw.adw_419" appeared; new tool "adw.adw_422" appeared; new tool "adw.adw_424" appeared; new tool "adw.adw_426" appeared; new tool "adw.adw_428" appeared; new tool "adw.adw_430" appeared; new tool "adw.adw_431" appeared; new tool "adw.adw_432" appeared; new tool "adw.adw_434" appeared; new tool "adw.adw_435" appeared; new tool "adw.adw_436" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_439" appeared; new tool "adw.adw_p01" appeared; new tool "adw.adw_p02" appeared; new tool "adw.adw_p03" appeared; new tool "adw.adw_p04" appeared; new tool "adw.adw_p05" appeared; new tool "adw.adw_p06" appeared; new tool "adw.adw_p07" appeared; new tool "adw.adw_p08" appeared; new tool "adw.adw_p09" appeared; new tool "adw.adw_p10" appeared; new tool "adw.adw_p11" appeared; new tool "adw.adw_p12" appeared; new tool "adw.adw_p13" appeared; new tool "adw.adw_p14" appeared; new tool "adw.adw_p15" appeared; new tool "adw.adw_p16" appeared; new tool "adw.adw_p17" appeared; new tool "adw.adw_p18" appeared; new tool "adw.adw_p19" appeared; new tool "adw.adw_p21" appeared; new tool "adw.adw_p22" appeared; new tool "adw.adw_p23" appeared; new tool "adw.adw_p24" appeared; new tool "adw.adw_500" appeared; new tool "adw.adw_501" appeared; new tool "adw.adw_502" appeared; new tool "adw.adw_503" appeared; new tool "adw.adw_504" appeared; new tool "adw.adw_505" appeared; new tool "adw.adw_506" appeared; new tool "adw.adw_507" appeared; new tool "adw.adw_508" appeared; new tool "adw.adw_509" appeared; new tool "adw.adw_510" appeared; new tool "adw.adw_511" appeared; new tool "adw.adw_512" appeared; new tool "adw.adw_513" appeared; new tool "adw.adw_514" appeared; new tool "adw.adw_515" appeared; new tool "adw.adw_516" appeared; new tool "adw.adw_517" appeared; new tool "adw.adw_518" appeared; new tool "adw.adw_519" appeared; new tool "adw.adw_520" appeared; new tool "adw.adw_521" appeared; new tool "adw.adw_522" appeared; new tool "adw.adw_523" appeared; new tool "adw.adw_524" appeared; new tool "adw.adw_528" appeared; new tool "adw.adw_529" appeared; new tool "adw.adw_525" appeared; new tool "adw.adw_526" appeared; new tool "adw.adw_527" appeared; new tool "adw.adw_530" appeared; new tool "adw.adw_531" appeared; new tool "adw.adw_532" appeared; new tool "adw.adw_533" appeared; new tool "adw.adw_534" appeared; new tool "adw.adw_535" appeared; new tool "adw.adw_536" appeared; new tool "adw.adw_537" appeared; new tool "adw.adw_538" appeared; new tool "adw.adw_539" appeared; new tool "adw.adw_540" appeared; new tool "adw.adw_541" appeared; new tool "adw.adw_542" appeared; new tool "adw.adw_543" appeared; new tool "adw.adw_544" appeared; new tool "adw.adw_545" appeared; new tool "adw.adw_546" appeared; new tool "adw.adw_547" appeared; new tool "adw.adw_548" appeared; new tool "adw.adw_549" appeared; new tool "adw.adw_550" appeared; new tool "adw.adw_551" appeared; new tool "adw.adw_552" appeared; new tool "adw.adw_553" appeared; new tool "adw.adw_554" appeared; new tool "adw.adw_555" appeared; new tool "adw.adw_556" appeared; new tool "adw.adw_557" appeared; new tool "adw.adw_558" appeared; new tool "adw.adw_559" appeared; new tool "adw.adw_560" appeared; new tool "adw.adw_561" appeared; new tool "adw.adw_562" appeared; new tool "adw.adw_563" appeared; new tool "adw.adw_564" appeared; new tool "adw.adw_565" appeared; new tool "adw.adw_566" appeared; new tool "adw.adw_568" appeared; new tool "adw.adw_569" appeared; new tool "adw.adw_570" appeared; new tool "adw.adw_571" appeared; new tool "adw.adw_572" appeared; new tool "adw.adw_573" appeared; new tool "adw.adw_574" appeared; new tool "adw.adw_575" appeared; new tool "adw.adw_576" appeared; new tool "adw.adw_577" appeared; new tool "adw.adw_578" appeared; new tool "adw.adw_579" appeared; new tool "adw.adw_580" appeared; new tool "adw.adw_581" appeared; new tool "adw.adw_582" appeared; new tool "adw.adw_583" appeared; new tool "adw.adw_584" appeared; new tool "adw.adw_587" appeared; new tool "adw.adw_588" touches a sensitive surface (email/exec/net/fs); new tool "adw.adw_589" appeared; new tool "adw.adw_590" appeared; new tool "adw.adw_591" appeared; new tool "adw.adw_592" appeared; new tool "adw.adw_593" appeared; new tool "adw.adw_594" appeared; new tool "adw.adw_595" appeared; new tool "adw.adw_596" appeared; new tool "adw.adw_597" appeared; new tool "adw.adw_598" appeared; new tool "adw.adw_599" appeared; new tool "adw.adw_600" appeared; new tool "adw.adw_601" appeared; new tool "adw.adw_602" appeared.

• Transport config

  fail10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  remote MCP endpoint declares NO authentication (unauthenticated remote — nginx-ui/CVE-2026-33032 class)