com.scriptmasterlabs/x402-gateway

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  fail25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  tool "get_beacon_score" param "tool" description: names an outbound copy/exfil destination (BCC/exfil verb). tool "forge_llm" param "prompt" description: text addressed to the model rather than describing a capability.

• Supply chain

  pass25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  repository linkage verified

• Credential hygiene

  fail15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  tool "equities_heatmap_preview" has a secret-shaped input parameter "tradier_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_preview" has a secret-shaped input parameter "polygon_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_preview" has a secret-shaped input parameter "alpaca_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_preview" has a secret-shaped input parameter "alpaca_api_secret" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_full" has a secret-shaped input parameter "tradier_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_full" has a secret-shaped input parameter "polygon_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_full" has a secret-shaped input parameter "alpaca_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "equities_heatmap_full" has a secret-shaped input parameter "alpaca_api_secret" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_preview" has a secret-shaped input parameter "tradier_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_preview" has a secret-shaped input parameter "polygon_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_preview" has a secret-shaped input parameter "alpaca_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_preview" has a secret-shaped input parameter "alpaca_api_secret" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_full" has a secret-shaped input parameter "tradier_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_full" has a secret-shaped input parameter "polygon_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_full" has a secret-shaped input parameter "alpaca_api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "options_delta_heatmap_full" has a secret-shaped input parameter "alpaca_api_secret" — secrets must never be tool parameters (the model would supply/handle the credential). tool "launchpad_buy" has a secret-shaped input parameter "token_address" — secrets must never be tool parameters (the model would supply/handle the credential).

• Permission scope

  unscannable15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No source files, package.json, or pyproject were fetched; cannot infer capability scope.

• Version behavior

  warn10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 1.0.0 (minor bump): tool "list_magnets" description changed (wording only, no injection pattern); tool "list_magnets" gained input property(ies): min_imp_score, sort; tool "get_agent_magnet_beacons" description changed (wording only, no injection pattern); tool "backtest_run" description changed (wording only, no injection pattern); tool "backtest_run" gained input property(ies): ticker, lookback_days, fees, slippage, momentum_window, momentum_threshold, wallet_address; new tool "sml_discover" appeared; new tool "sml_status" appeared; new tool "get_beacon_score" appeared; new tool "get_beacon_passport" appeared; new tool "beacon_scout" appeared; new tool "apm_negotiate" appeared; new tool "apm_execute" touches a sensitive surface (email/exec/net/fs); new tool "agentcard_lookup" appeared; new tool "agentcard_verify" appeared; new tool "agentcard_mint" appeared; new tool "backtest_validate" appeared; new tool "tradier_quote" appeared; new tool "tradier_order" appeared; new tool "tradier_positions" appeared; new tool "robinhood_quote" appeared; new tool "robinhood_order" appeared; new tool "robinhood_portfolio" appeared; new tool "copytrader_status" appeared; new tool "copytrader_whales" appeared; new tool "copytrader_subscribe" appeared; new tool "crawl_paid_fetch" touches a sensitive surface (email/exec/net/fs); new tool "crypto_token_price" appeared; new tool "crypto_trending" appeared; new tool "equities_heatmap_preview" appeared; new tool "equities_heatmap_full" appeared; new tool "options_delta_heatmap_preview" appeared; new tool "options_delta_heatmap_full" appeared; new tool "federal_grants" appeared; new tool "federal_npi_lookup" appeared; new tool "federal_sbir_grants" appeared; new tool "federal_osha" appeared; new tool "federal_epa_violations" appeared; new tool "federal_drug_label" appeared; new tool "federal_drug_recall" appeared; new tool "federal_drug_adverse_events" appeared; new tool "federal_clinical_trials" appeared; new tool "federal_sec_filings" appeared; new tool "federal_insider_trades" appeared; new tool "federal_lobbying" appeared; new tool "federal_patents" appeared; new tool "federal_finra_broker" appeared; new tool "federal_fec_finance" appeared; new tool "federal_congress_bills" appeared; new tool "federal_treasury_yields" appeared; new tool "federal_entity_compliance" appeared; new tool "federal_usaspending_awards" appeared; new tool "federal_grants_gov" appeared; new tool "federal_sba_awards" appeared; new tool "federal_options_flow" appeared; new tool "federal_sam_opportunities" appeared; new tool "federal_sam_entity" appeared; new tool "forge_status" appeared; new tool "forge_llm" appeared; new tool "ftd_threshold_scan" appeared; new tool "fx_exchange_rate" appeared; new tool "ghost_status" appeared; new tool "ghost_route" appeared; new tool "pha_lookup" appeared; new tool "hcv_fmr" appeared; new tool "housing_landlord_checklist" appeared; new tool "hud_vash_contacts" appeared; new tool "section8_geo_lookup" appeared; new tool "section8_fmr" appeared; new tool "section8_income_limits" appeared; new tool "pha_opportunities" appeared; new tool "pha_search" appeared; new tool "launchpad_status" appeared; new tool "launchpad_list" appeared; new tool "launchpad_create" appeared; new tool "launchpad_buy" appeared; new tool "leviathan_signal" appeared; new tool "nexus_agent_hire" appeared; new tool "proof_invoice" appeared; new tool "proof_verify" appeared; new tool "proof_credit_score" appeared; new tool "rails_status" appeared; new tool "rails_transfer" appeared; new tool "screen_restricted_party" appeared; new tool "shadow_query" appeared; new tool "shadow_ingest" appeared; new tool "squeezeos_preview" appeared; new tool "squeezeos_history" appeared; new tool "squeezeos_oracle" appeared; new tool "squeezeos_ftd" appeared; new tool "squeezeos_status" appeared; new tool "squeezeos_demo" appeared; new tool "squeezeos_marketplace_browse" appeared; new tool "squeezeos_futures_leaderboard" appeared; new tool "squeezeos_council" appeared; new tool "squeezeos_scan" appeared; new tool "squeezeos_options" appeared; new tool "squeezeos_iwm" appeared; new tool "squeezeos_marketplace_read" touches a sensitive surface (email/exec/net/fs); new tool "search_trade_leads" appeared; new tool "xdeo_earnings_estimate" appeared; new tool "xmit_edgar_decode" appeared.

• Transport config

  fail10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  remote MCP endpoint declares NO authentication (unauthenticated remote — nginx-ui/CVE-2026-33032 class)