com.pilotgentic/mcp-server

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  unscannable25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  No tool descriptions, server instructions, prompts, or resources were fetched; nothing to scan for injection.

• Supply chain

  pass25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  repository linkage verified

• Credential hygiene

  warn15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  src/tools/crypto-tool.js: assigns a literal to password (alph…ic (len 12)) — non-provider secret literal; prefer environment intake. Reads secrets from the environment (e.g. src/tools/accessibility-inspector.js) — the recommended intake shape.

• Permission scope

  fail15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  HIGH: src/security/detection-rules.js: references a sensitive credential path (\.ssh\) — the tool-poisoning exfiltration target. HIGH: src/tools/file-permissions-auditor.js: references a sensitive credential path (/.ssh/) — the tool-poisoning exfiltration target. HIGH: src/tools/list-skills.js: references a sensitive credential path (/.ssh/) — the tool-poisoning exfiltration target. HIGH: shell/exec capability AND network egress together — download-and-execute risk (src/tools/accessibility-check.js: imports child_process; src/tools/app-update-checker.js: outbound HTTP/socket call). HIGH: shell/exec capability AND destructive filesystem writes together (src/tools/accessibility-check.js: imports child_process; src/tools/accessibility-check.js: path traversal ('../') combined with file access). discloses shell/exec capability: src/tools/accessibility-check.js: imports child_process discloses shell/exec capability: src/tools/accessibility-inspector.js: imports child_process discloses shell/exec capability: src/tools/accessibility-manager.js: imports child_process discloses shell/exec capability: src/tools/act.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/airdrop.js: imports child_process discloses shell/exec capability: src/tools/airport.js: imports child_process discloses shell/exec capability: src/tools/annotate.js: imports child_process discloses shell/exec capability: src/tools/api-tester.js: imports child_process discloses shell/exec capability: src/tools/app-context.js: imports child_process discloses shell/exec capability: src/tools/app-crash-reporter.js: imports child_process discloses shell/exec capability: src/tools/app-defaults-inspector.js: imports child_process discloses shell/exec capability: src/tools/app-environment-manager.js: imports child_process discloses shell/exec capability: src/tools/app-events.js: imports child_process discloses shell/exec capability: src/tools/app-health.js: imports child_process discloses shell/exec capability: src/tools/app-inspect.js: imports child_process discloses shell/exec capability: src/tools/app-launch-history.js: imports child_process discloses shell/exec capability: src/tools/app-launcher-pro.js: imports child_process discloses shell/exec capability: src/tools/app-launcher.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/app-lifecycle-manager.js: imports child_process discloses shell/exec capability: src/tools/app-memory-profiler.js: imports child_process discloses shell/exec capability: src/tools/app-permissions-manager.js: imports child_process discloses shell/exec capability: src/tools/app-permissions.js: imports child_process discloses shell/exec capability: src/tools/app-privacy-settings.js: imports child_process discloses shell/exec capability: src/tools/app-sandbox-inspector.js: imports child_process discloses shell/exec capability: src/tools/app-sandbox.js: imports child_process discloses shell/exec capability: src/tools/app-shortcuts.js: imports child_process discloses shell/exec capability: src/tools/app-state.js: imports child_process discloses shell/exec capability: src/tools/app-store-info.js: imports child_process discloses shell/exec capability: src/tools/app-store-manager.js: imports child_process discloses shell/exec capability: src/tools/app-store-receipt-checker.js: imports child_process discloses shell/exec capability: src/tools/app-store-receipt.js: imports child_process discloses shell/exec capability: src/tools/app-switcher.js: imports child_process discloses shell/exec capability: src/tools/app-update-checker.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/app-usage-stats.js: imports child_process discloses shell/exec capability: src/tools/app.js: imports child_process discloses shell/exec capability: src/tools/apple-watch-manager.js: imports child_process discloses shell/exec capability: src/utils/applescript.js: imports child_process discloses shell/exec capability: src/tools/appstore.js: imports child_process discloses shell/exec capability: src/tools/archive-manager.js: imports child_process discloses shell/exec capability: src/tools/archive.js: imports child_process discloses shell/exec capability: src/tools/audio-device.js: imports child_process discloses shell/exec capability: src/tools/audio-output-router.js: imports child_process discloses shell/exec capability: src/tools/audio-session-manager.js: imports child_process discloses shell/exec capability: src/tools/audio.js: imports child_process discloses shell/exec capability: src/tools/auto-type.js: imports child_process discloses shell/exec capability: src/tools/automator.js: imports child_process discloses shell/exec capability: src/tools/ax-action.js: imports child_process discloses shell/exec capability: src/tools/battery.js: imports child_process discloses shell/exec capability: src/tools/bluetooth-device-manager.js: imports child_process discloses shell/exec capability: src/tools/bluetooth-manager.js: imports child_process discloses shell/exec capability: src/tools/bluetooth-pairing-manager.js: imports child_process discloses shell/exec capability: src/tools/bluetooth.js: imports child_process discloses shell/exec capability: src/tools/browser-control.js: imports child_process discloses shell/exec capability: src/tools/browser-history-manager.js: imports child_process discloses shell/exec capability: scripts/build-tool-index.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/calendar-events-manager.js: imports child_process discloses shell/exec capability: src/tools/calendar-manager.js: imports child_process discloses shell/exec capability: src/tools/calendar-search.js: imports child_process discloses shell/exec capability: src/tools/calendar.js: imports child_process discloses shell/exec capability: src/tools/call-skill.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/utils/cdp-client.js: imports child_process discloses shell/exec capability: src/tools/certificate-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/certificate.js: imports child_process discloses shell/exec capability: src/utils/cgwindow-query.js: imports child_process discloses shell/exec capability: src/tools/chrome.js: imports child_process discloses shell/exec capability: src/tools/clipboard-files.js: imports child_process discloses shell/exec capability: src/tools/clipboard-format-converter.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-formatter.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-history-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-image.js: imports child_process discloses shell/exec capability: src/tools/clipboard-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-monitor.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-ocr.js: imports child_process discloses shell/exec capability: src/tools/clipboard-pipeline.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-transform.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/clipboard-watch.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/color-dropper.js: imports child_process discloses shell/exec capability: src/tools/color-picker-advanced.js: imports child_process discloses shell/exec capability: src/tools/color-picker.js: imports child_process discloses shell/exec capability: src/tools/color-system.js: imports child_process discloses shell/exec capability: src/tools/color.js: imports child_process discloses shell/exec capability: src/tools/compare.js: imports child_process discloses shell/exec capability: src/tools/contacts-address-book.js: imports child_process discloses shell/exec capability: src/tools/contacts-manager.js: imports child_process discloses shell/exec capability: src/tools/contacts-search.js: imports child_process discloses shell/exec capability: src/tools/contacts.js: imports child_process discloses shell/exec capability: src/tools/continuity-features-manager.js: imports child_process discloses shell/exec capability: src/tools/cron.js: imports child_process discloses shell/exec capability: src/tools/cursor-context.js: imports child_process discloses shell/exec capability: src/utils/daemon-lifecycle.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/data-converter.js: imports child_process discloses shell/exec capability: src/tools/data-store.js: imports child_process discloses shell/exec capability: src/tools/defaults.js: imports child_process discloses shell/exec capability: src/tools/desktop-items.js: imports child_process discloses shell/exec capability: src/tools/developer-tools.js: imports child_process discloses shell/exec capability: src/tools/dialog.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/dictation.js: imports child_process discloses shell/exec capability: src/tools/disk-health-monitor.js: imports child_process discloses shell/exec capability: src/tools/disk-image.js: imports child_process discloses shell/exec capability: src/tools/disk-manager.js: imports child_process discloses shell/exec capability: src/tools/disk-space-analyzer.js: imports child_process discloses shell/exec capability: src/tools/disk-usage-analyzer.js: imports child_process discloses shell/exec capability: src/tools/disk.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/display-arrangement.js: imports child_process discloses shell/exec capability: src/utils/display-bounds.js: imports child_process discloses shell/exec capability: src/tools/display-color-profile.js: imports child_process discloses shell/exec capability: src/tools/display-manager.js: imports child_process discloses shell/exec capability: src/tools/display.js: imports child_process discloses shell/exec capability: src/tools/dns-manager.js: imports child_process discloses shell/exec capability: src/tools/dock.js: imports child_process discloses shell/exec capability: src/utils/docked-tool-indexer.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/docker-container-manager.js: imports child_process discloses shell/exec capability: src/tools/docker.js: imports child_process discloses shell/exec capability: src/tools/drag-drop.js: imports child_process discloses shell/exec capability: src/tools/email-manager.js: imports child_process discloses shell/exec capability: src/tools/energy-battery-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/energy-saver-settings.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/env-inspector.js: imports child_process discloses shell/exec capability: src/tools/env-manager.js: imports child_process discloses shell/exec capability: src/tools/env.js: imports child_process discloses shell/exec capability: src/tools/environment-variables-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/event-monitor.js: imports child_process discloses shell/exec capability: src/tools/file-attribute-manager.js: imports child_process discloses shell/exec capability: src/tools/file-compression-tool.js: imports child_process discloses shell/exec capability: src/tools/file-integrity-checker.js: imports child_process discloses shell/exec capability: src/tools/file-monitor.js: imports child_process discloses shell/exec capability: src/tools/file-organizer.js: imports child_process discloses shell/exec capability: src/tools/file-permissions-auditor.js: imports child_process discloses shell/exec capability: src/tools/file-permissions-manager.js: imports child_process discloses shell/exec capability: src/tools/file-picker.js: imports child_process discloses shell/exec capability: src/tools/file-search.js: imports child_process discloses shell/exec capability: src/tools/file-sync.js: imports child_process discloses shell/exec capability: src/tools/file-system-manager.js: imports child_process discloses shell/exec capability: src/tools/file-tags.js: imports child_process discloses shell/exec capability: src/tools/file-vault-manager.js: imports child_process discloses shell/exec capability: src/tools/file-version-tracker.js: imports child_process discloses shell/exec capability: src/tools/file-watcher-monitor.js: imports child_process discloses shell/exec capability: src/tools/file-watcher.js: imports child_process discloses shell/exec capability: src/tools/file.js: imports child_process discloses shell/exec capability: src/tools/finder-automation.js: imports child_process discloses shell/exec capability: src/tools/finder-manager.js: imports child_process discloses shell/exec capability: src/tools/finder.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/firewall-manager.js: imports child_process discloses shell/exec capability: src/tools/focus-mode.js: imports child_process discloses shell/exec capability: src/tools/font-book-manager.js: imports child_process discloses shell/exec capability: src/tools/font-cache-manager.js: imports child_process discloses shell/exec capability: src/tools/font-manager.js: imports child_process discloses shell/exec capability: src/tools/fonts.js: imports child_process discloses shell/exec capability: src/tools/form.js: imports child_process discloses shell/exec capability: src/tools/gesture.js: imports child_process discloses shell/exec capability: src/tools/get-value.js: imports child_process discloses shell/exec capability: src/tools/git-advanced.js: imports child_process discloses shell/exec capability: src/tools/git-hooks-manager.js: imports child_process discloses shell/exec capability: src/tools/git-repository-manager.js: imports child_process discloses shell/exec capability: src/tools/git.js: imports child_process discloses shell/exec capability: src/tools/haptic.js: imports child_process discloses shell/exec capability: src/tools/hardware-info.js: imports child_process discloses shell/exec capability: src/tools/homebrew-package-manager.js: imports child_process discloses shell/exec capability: src/tools/homebrew.js: imports child_process discloses shell/exec capability: src/tools/host-file-manager.js: imports child_process discloses shell/exec capability: src/tools/hosts.js: imports child_process discloses shell/exec capability: src/tools/hotcorners.js: imports child_process discloses shell/exec capability: src/tools/hotspot-map.js: imports child_process discloses shell/exec capability: src/tools/http-monitor.js: imports child_process discloses shell/exec capability: src/tools/icloud-drive.js: imports child_process discloses shell/exec capability: src/tools/icloud-manager.js: imports child_process discloses shell/exec capability: src/tools/icloud.js: imports child_process discloses shell/exec capability: src/tools/image-analysis.js: imports child_process discloses shell/exec capability: src/tools/image-batch.js: imports child_process discloses shell/exec capability: src/tools/image-convert.js: imports child_process discloses shell/exec capability: src/tools/image-editor.js: imports child_process discloses shell/exec capability: scripts/index-docked-tool.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/input-device.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/input-method.js: imports child_process discloses shell/exec capability: src/marketplace/install-package.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/iterm2-control.js: imports child_process discloses shell/exec capability: src/tools/keyboard-layout-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/keyboard-macro.js: imports child_process discloses shell/exec capability: src/tools/keyboard-shortcut-recorder.js: imports child_process discloses shell/exec capability: src/tools/keychain-access-manager.js: imports child_process discloses shell/exec capability: src/tools/keychain-item.js: imports child_process discloses shell/exec capability: src/tools/keychain-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/keychain-search.js: imports child_process discloses shell/exec capability: src/tools/keychain.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/launchagent.js: imports child_process discloses shell/exec capability: src/tools/launchd-manager.js: imports child_process discloses shell/exec capability: src/tools/launchpad-manager.js: imports child_process discloses shell/exec capability: src/tools/location-services-manager.js: imports child_process discloses shell/exec capability: src/tools/location.js: imports child_process discloses shell/exec capability: src/tools/log-analyzer.js: imports child_process discloses shell/exec capability: src/tools/login-items-manager.js: imports child_process discloses shell/exec capability: src/tools/loginwindow-manager.js: imports child_process discloses shell/exec capability: src/tools/logs.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/macos-firewall-manager.js: imports child_process discloses shell/exec capability: src/tools/macos-sharing-manager.js: imports child_process discloses shell/exec capability: src/tools/macos-update-manager.js: imports child_process discloses shell/exec capability: src/tools/macos-updates-checker.js: imports child_process discloses shell/exec capability: src/tools/mail.js: imports child_process discloses shell/exec capability: src/tools/markdown-notes.js: imports child_process discloses shell/exec capability: src/tools/markdown-render.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/media-info.js: imports child_process discloses shell/exec capability: src/tools/media-player-controller.js: imports child_process discloses shell/exec capability: src/tools/meeting-control.js: imports child_process discloses shell/exec capability: src/tools/memory-pressure-monitor.js: imports child_process discloses shell/exec capability: src/tools/menu-bar.js: imports child_process discloses shell/exec capability: src/tools/menu-extra-manager.js: imports child_process discloses shell/exec capability: src/tools/menu-search.js: imports child_process discloses shell/exec capability: src/tools/menubar-extra.js: imports child_process discloses shell/exec capability: src/tools/menubar-item-manager.js: imports child_process discloses shell/exec capability: src/tools/messages-manager.js: imports child_process discloses shell/exec capability: src/tools/mouse-keyboard-settings.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/mouse.js: imports child_process discloses shell/exec capability: src/tools/multi-display.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/music-player-controller.js: imports child_process discloses shell/exec capability: src/tools/music.js: imports child_process discloses shell/exec capability: src/tools/network-diagnostics-tool.js: imports child_process discloses shell/exec capability: src/tools/network-interface-controller.js: imports child_process discloses shell/exec capability: src/tools/network-interface-manager.js: imports child_process discloses shell/exec capability: src/tools/network-monitor-advanced.js: imports child_process discloses shell/exec capability: src/tools/network-monitor.js: imports child_process discloses shell/exec capability: src/tools/network-port-scanner.js: imports child_process discloses shell/exec capability: src/tools/network-quality.js: imports child_process discloses shell/exec capability: src/tools/network-scanner.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/network-share.js: imports child_process discloses shell/exec capability: src/tools/network-traffic-monitor.js: imports child_process discloses shell/exec capability: src/tools/network.js: imports child_process discloses shell/exec capability: src/tools/notes-manager.js: imports child_process discloses shell/exec capability: src/tools/notes.js: imports child_process discloses shell/exec capability: src/tools/notification-center-manager.js: imports child_process discloses shell/exec capability: src/tools/notification-center.js: imports child_process discloses shell/exec capability: src/tools/notification-do-not-disturb.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/notification-history.js: imports child_process discloses shell/exec capability: src/tools/notification-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/notification-scheduler.js: imports child_process discloses shell/exec capability: src/tools/notification-sound-manager.js: imports child_process discloses shell/exec capability: src/tools/notifications-manager.js: imports child_process discloses shell/exec capability: src/tools/notify.js: imports child_process discloses shell/exec capability: src/tools/npm-package-manager.js: imports child_process discloses shell/exec capability: src/tools/npm.js: imports child_process discloses shell/exec capability: src/tools/ocr.js: imports child_process discloses shell/exec capability: src/tools/open-file.js: imports child_process discloses shell/exec capability: src/publish/package-builder.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/pasteboard.js: imports child_process discloses shell/exec capability: src/tools/pdf-annotate.js: imports child_process discloses shell/exec capability: src/tools/pdf-extract.js: imports child_process discloses shell/exec capability: src/tools/permission.js: imports child_process discloses shell/exec capability: src/tools/plist-editor.js: imports child_process discloses shell/exec capability: src/tools/plist.js: imports child_process discloses shell/exec capability: src/tools/power-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/power-nap-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/power-schedule-manager.js: imports child_process discloses shell/exec capability: src/tools/power.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/printer-manager.js: imports child_process discloses shell/exec capability: src/tools/printer.js: imports child_process discloses shell/exec capability: src/tools/privacy.js: imports child_process discloses shell/exec capability: src/tools/process-cpu-profiler.js: imports child_process discloses shell/exec capability: src/utils/watch/process-lifecycle-source.js: imports child_process discloses shell/exec capability: src/tools/process-manager-advanced.js: imports child_process discloses shell/exec capability: src/tools/process-manager.js: imports child_process discloses shell/exec capability: src/tools/process-monitor.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/process-resource-monitor.js: imports child_process discloses shell/exec capability: src/tools/process.js: imports child_process discloses shell/exec capability: src/tools/proxy-settings-manager.js: imports child_process discloses shell/exec capability: src/tools/python-environment-manager.js: imports child_process discloses shell/exec capability: src/tools/python.js: imports child_process discloses shell/exec capability: src/tools/qr-code.js: imports child_process discloses shell/exec capability: src/tools/quicklook.js: imports child_process discloses shell/exec capability: src/tools/reminders-task-manager.js: imports child_process discloses shell/exec capability: src/tools/reminders.js: imports child_process discloses shell/exec capability: src/tools/safari-controller.js: imports child_process discloses shell/exec capability: src/tools/safari-history.js: imports child_process discloses shell/exec capability: src/tools/safari.js: imports child_process discloses shell/exec capability: src/tools/save.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/scheduler.js: imports child_process discloses shell/exec capability: src/tools/screen-analysis.js: imports child_process discloses shell/exec capability: src/tools/screen-brightness.js: imports child_process discloses shell/exec capability: src/tools/screen-capture.js: imports child_process discloses shell/exec capability: src/tools/screen-color-calibration.js: imports child_process discloses shell/exec capability: src/tools/screen-lock-manager.js: imports child_process discloses shell/exec capability: src/tools/screen-reader.js: imports child_process discloses shell/exec capability: src/tools/screen-record.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/screen-resolution-manager.js: imports child_process discloses shell/exec capability: src/tools/screen-saver-manager.js: imports child_process discloses shell/exec capability: src/tools/screen-time.js: imports child_process discloses shell/exec capability: src/tools/screen-zones.js: imports child_process discloses shell/exec capability: src/tools/screensaver.js: imports child_process discloses shell/exec capability: src/tools/screenshot-annotate.js: imports child_process discloses shell/exec capability: src/tools/screenshot-diff.js: imports child_process discloses shell/exec capability: src/tools/screenshot-manager.js: imports child_process discloses shell/exec capability: src/tools/screenshot-region.js: imports child_process discloses shell/exec capability: src/tools/screenshot-settings-manager.js: imports child_process discloses shell/exec capability: src/utils/screenshot.js: imports child_process discloses shell/exec capability: src/tools/search-analytics.js: imports child_process discloses shell/exec capability: src/tools/secure-input.js: imports child_process discloses shell/exec capability: src/tools/select-menu.js: imports child_process discloses shell/exec capability: src/tools/set-value.js: imports child_process discloses shell/exec capability: src/tools/shell-script-runner.js: imports child_process discloses shell/exec capability: src/tools/shell.js: imports child_process discloses shell/exec capability: src/tools/shortcuts-runner.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/shortcuts.js: imports child_process discloses shell/exec capability: src/tools/simulator-device-manager.js: imports child_process discloses shell/exec capability: src/tools/siri.js: imports child_process discloses shell/exec capability: src/tools/slack.js: imports child_process discloses shell/exec capability: src/tools/snippet-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/spaces.js: imports child_process discloses shell/exec capability: src/tools/speak.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/speech-synthesis.js: imports child_process discloses shell/exec capability: src/tools/speech-to-text.js: imports child_process discloses shell/exec capability: src/tools/speech.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/spotlight-index-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/spotlight-indexer-manager.js: imports child_process discloses shell/exec capability: src/tools/spotlight-search-builder.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/spotlight-search-manager.js: imports child_process and calls exec/spawn discloses shell/exec capability: src/tools/spotlight-search.js: imports child_process discloses shell/exec capability: src/tools/spotlight.js: imports child_process discloses shell/exec capability: src/tools/stage-manager-controller.js: imports child_process discloses broad/destructive filesystem access: src/tools/accessibility-check.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/accessibility-inspector.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/accessibility-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/act.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/airdrop.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/airport.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/annotate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/api-tester.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-defaults-inspector.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-environment-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-events.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-health.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-inspect.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-launcher-pro.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-launcher.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-permissions-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-permissions.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-privacy-settings.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-sandbox.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-shortcuts.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-state.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-store-info.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-store-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-store-receipt-checker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-store-receipt.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-switcher.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app-update-checker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/app.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/apple-watch-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/appstore.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/archive-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/archive.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/audio-device.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/audio-output-router.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/audio-session-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/audio.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/auto-type.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/automator.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/ax-action.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/ax-path-at-point.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/battery.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/bluetooth-device-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/bluetooth-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/bluetooth-pairing-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/bluetooth.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/browser-control.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/browser-history-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/calendar-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/calendar-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/calendar.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/certificate-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/certificate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/chrome.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/click-element.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/click-hold.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/click.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-files.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-format-converter.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-formatter.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-history-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-history.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-image.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-ocr.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-pipeline.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-transform.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-watch.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/clipboard-write.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/color-dropper.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/color-picker-advanced.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/color-picker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/color-system.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/color.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/compare.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/contacts-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/contacts-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/contacts.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/context-menu.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/continuity-features-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/cron.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/crypto-tool.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/cursor-context.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/daemon-bridge.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/data-converter.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/data-store.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/date-calculator.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/date-time.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/defaults.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/desktop-items.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/developer-tools.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/devtools-network.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/dialog.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/dictation.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/watch/dirty-flag-source.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/dirty-flag.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/disk-health-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/disk-image.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/disk-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/disk-usage-analyzer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/disk.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/display-arrangement.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/display-color-profile.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/display-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/display.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/dns-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/dock.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/docked-tool-indexer.js: destructive/writing fs.* call (write/unlink/rm/chmod/rename) discloses broad/destructive filesystem access: src/utils/docked-tool-indexer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/docker-container-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/docker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/double-click.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/drag-drop.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/drag.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/draw-path.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/element-fingerprint.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/element-locate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/email-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/energy-battery-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/energy-saver-settings.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/env-inspector.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/env-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/env.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/event-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/extract-console-logs.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-attribute-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-compression-tool.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-integrity-checker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-organizer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-permissions-auditor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-permissions-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-picker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-sync.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-system-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-tags.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-vault-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-version-tracker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-watcher-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file-watcher.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/file.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/groups/files.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/find.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/finder-automation.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/finder-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/finder.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/firewall-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/focus-mode.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/focus-timer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/font-book-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/font-cache-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/font-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/fonts.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/form.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/gesture.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/get-value.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/git-advanced.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/git-hooks-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/git-repository-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/git.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/grid.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/haptic.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/hardware-info.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/homebrew-package-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/homebrew.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/host-file-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/hosts.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/hotcorners.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/hotkey.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/hotspot-map.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/http-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/http-request.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/icloud-drive.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/icloud-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/icloud.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/image-analysis.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/image-batch.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/image-convert.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/image-editor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/input-device.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/input-method.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/iterm2-control.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/json-tool.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/json-tools.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/key.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keyboard-layout-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keyboard-macro.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keyboard-shortcut-recorder.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keychain-access-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keychain-item.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keychain-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keychain-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/keychain.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/launch.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/launchagent.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/launchd-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/launchpad-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/list-skills.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/location-services-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/location.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/log-analyzer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/login-items-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/loginwindow-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/logs.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/macos-firewall-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/macos-sharing-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/macos-update-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/macos-updates-checker.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/mail.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/markdown-notes.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/markdown-render.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/markdown-tools.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/math-tool.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/media-info.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/media-player-controller.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/meeting-control.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/memory-pressure-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/menu-bar.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/menu-extra-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/menu-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/menubar-extra.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/menubar-item-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/messages-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/mouse-keyboard-settings.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/mouse.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/move.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/multi-display.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/music-player-controller.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/music.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/navigate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-interface-controller.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-interface-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-monitor-advanced.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-port-scanner.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-quality.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-scanner.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-share.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network-traffic-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/network.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notes-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notes.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-center-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-center.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-do-not-disturb.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-history.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notification-sound-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notifications-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/notify.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/npm-package-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/npm.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/ocr.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/open-file.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/publish/package-builder.js: destructive/writing fs.* call (write/unlink/rm/chmod/rename) discloses broad/destructive filesystem access: src/publish/package-builder.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/password-gen.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/pasteboard.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/pdf-annotate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/pdf-extract.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/permission.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/pick.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/plist-editor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/plist.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/power-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/power-nap-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/power-schedule-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/power.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/printer-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/printer.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/privacy.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/process-cpu-profiler.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/process-manager-advanced.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/process-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/process-resource-monitor.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/process.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/proxy-settings-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/python-environment-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/python.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/qr-code.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/quicklook.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/record-add-step.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/record-stop.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/regex-builder.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/regex-tool.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/reminders.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/resolve-element.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/right-click.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/run-workflow.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/safari-controller.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/safari-history.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/safari.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/save.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/scheduler.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-analysis.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-brightness.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-capture.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-color-calibration.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-lock-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-reader.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-record.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-resolution-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-saver-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-time.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screen-zones.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screensaver.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot-annotate.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot-diff.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot-region.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot-settings-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/screenshot.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/utils/screenshot.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/scroll-to.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/scroll.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/secure-input.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/select-menu.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/set-value.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/shell-script-runner.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/shell.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/shortcuts-runner.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/shortcuts.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/simulator-device-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/siri.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/slack.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/snippet-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spaces.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/speak.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/speech-synthesis.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/speech-to-text.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/speech.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spotlight-index-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spotlight-indexer-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spotlight-search-manager.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spotlight-search.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/spotlight.js: path traversal ('../') combined with file access discloses broad/destructive filesystem access: src/tools/stage-manager-controller.js: path traversal ('../') combined with file access Capability DISCLOSURE, not a verdict: static analysis sees the primitive is present and reachable, not whether its use is attacker-controlled.

• Version behavior

  unscannable10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  no prior version to diff (first sight of com.pilotgentic/[email protected]); version-drift / rug-pull cannot be evaluated. Cold-start risk is covered by point-in-time checks (injection_surface, supply_chain, credential_hygiene), not here.

• Transport config

  warn10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  manifest/source references tracking behavior — disclosure