io.bighub/mcp

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  pass25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  Scanned 648 text field(s); no instruction-injection patterns found. PASS = no static red flag. A server can serve different tool descriptions at runtime (the rug-pull class), which static scanning cannot see.

• Supply chain

  pass25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  repository linkage verified

• Credential hygiene

  fail15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  tool "bighub_api_keys_validate" has a secret-shaped input parameter "api_key" — secrets must never be tool parameters (the model would supply/handle the credential). tool "bighub_webhooks_verify_signature" has a secret-shaped input parameter "secret" — secrets must never be tool parameters (the model would supply/handle the credential). tool "bighub_auth_refresh" has a secret-shaped input parameter "refresh_token" — secrets must never be tool parameters (the model would supply/handle the credential). tool "bighub_auth_logout" has a secret-shaped input parameter "refresh_token" — secrets must never be tool parameters (the model would supply/handle the credential).

• Permission scope

  pass15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No shell-exec, unbounded/sensitive filesystem, or download-and-run primitives found in scanned source. PASS = no static red flag. Static scanning is blind to code fetched or executed at runtime.

• Version behavior

  fail10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 0.2.0 (patch bump): new tool "bighub_http_request" touches a sensitive surface (email/exec/net/fs); new tool "bighub_actions_evaluate" appeared; new tool "bighub_actions_evaluate_payload" appeared; new tool "bighub_actions_dry_run" touches a sensitive surface (email/exec/net/fs); new tool "bighub_actions_live_connect" appeared; new tool "bighub_actions_live_heartbeat" appeared; new tool "bighub_actions_live_disconnect" appeared; new tool "bighub_actions_verify_validation" appeared; new tool "bighub_actions_observer_stats" appeared; new tool "bighub_actions_dashboard_summary" appeared; new tool "bighub_actions_status" appeared; new tool "bighub_actions_memory_ingest" appeared; new tool "bighub_actions_memory_context" touches a sensitive surface (email/exec/net/fs); new tool "bighub_actions_memory_refresh_aggregates" appeared; new tool "bighub_actions_memory_recommendations" appeared; new tool "bighub_constraints_create" appeared; new tool "bighub_constraints_list" appeared; new tool "bighub_constraints_get" touches a sensitive surface (email/exec/net/fs); new tool "bighub_constraints_update" appeared; new tool "bighub_constraints_delete" touches a sensitive surface (email/exec/net/fs); new tool "bighub_constraints_pause" appeared; new tool "bighub_constraints_resume" appeared; new tool "bighub_constraints_dry_run" touches a sensitive surface (email/exec/net/fs); new tool "bighub_constraints_validate" appeared; new tool "bighub_constraints_validate_dry_run" touches a sensitive surface (email/exec/net/fs); new tool "bighub_constraints_domains" appeared; new tool "bighub_constraints_versions" appeared; new tool "bighub_constraints_purge_idempotency" appeared; new tool "bighub_constraints_apply_patch" appeared; new tool "bighub_approvals_list" appeared; new tool "bighub_approvals_resolve" appeared; new tool "bighub_kill_switch_status" touches a sensitive surface (email/exec/net/fs); new tool "bighub_kill_switch_activate" appeared; new tool "bighub_kill_switch_deactivate" appeared; new tool "bighub_events_list" appeared; new tool "bighub_events_stats" appeared; new tool "bighub_api_keys_create" touches a sensitive surface (email/exec/net/fs); new tool "bighub_api_keys_list" appeared; new tool "bighub_api_keys_delete" touches a sensitive surface (email/exec/net/fs); new tool "bighub_api_keys_rotate" touches a sensitive surface (email/exec/net/fs); new tool "bighub_api_keys_validate" touches a sensitive surface (email/exec/net/fs); new tool "bighub_api_keys_scopes" touches a sensitive surface (email/exec/net/fs); new tool "bighub_webhooks_create" appeared; new tool "bighub_webhooks_list" appeared; new tool "bighub_webhooks_get" appeared; new tool "bighub_webhooks_update" appeared; new tool "bighub_webhooks_delete" touches a sensitive surface (email/exec/net/fs); new tool "bighub_webhooks_deliveries" appeared; new tool "bighub_webhooks_test" touches a sensitive surface (email/exec/net/fs); new tool "bighub_webhooks_list_events" appeared; new tool "bighub_webhooks_verify_signature" appeared; new tool "bighub_webhooks_replay_failed_delivery" appeared; new tool "bighub_auth_signup" appeared; new tool "bighub_auth_login" appeared; new tool "bighub_auth_refresh" appeared; new tool "bighub_auth_logout" appeared; new tool "bighub_cases_create" appeared; new tool "bighub_cases_get" appeared; new tool "bighub_cases_list" appeared; new tool "bighub_cases_report_outcome" appeared; new tool "bighub_cases_precedents" appeared; new tool "bighub_cases_calibration" appeared; new tool "bighub_outcomes_report" appeared; new tool "bighub_outcomes_report_batch" appeared; new tool "bighub_outcomes_get" appeared; new tool "bighub_outcomes_get_by_validation" appeared; new tool "bighub_outcomes_get_by_case" appeared; new tool "bighub_outcomes_timeline" appeared; new tool "bighub_outcomes_pending" appeared; new tool "bighub_outcomes_analytics" appeared; new tool "bighub_outcomes_taxonomy" appeared; new tool "bighub_outcomes_recommendation_quality" appeared; new tool "bighub_outcomes_partner_view" appeared; new tool "bighub_precedents_query" appeared; new tool "bighub_precedents_signals" appeared; new tool "bighub_precedents_stats" appeared; new tool "bighub_calibration_report" appeared; new tool "bighub_calibration_reliability" appeared; new tool "bighub_calibration_drift" appeared; new tool "bighub_calibration_breakdown" appeared; new tool "bighub_calibration_feedback" appeared; new tool "bighub_calibration_observe" appeared; new tool "bighub_calibration_quality_history" appeared; new tool "bighub_retrieval_query" appeared; new tool "bighub_retrieval_query_explained" appeared; new tool "bighub_retrieval_strategies" appeared; new tool "bighub_retrieval_strategy" appeared; new tool "bighub_retrieval_index_case" appeared; new tool "bighub_retrieval_stats" appeared; new tool "bighub_retrieval_compare" appeared; new tool "bighub_features_compute" appeared; new tool "bighub_features_snapshot" appeared; new tool "bighub_features_get_snapshot" appeared; new tool "bighub_features_list_snapshots" appeared; new tool "bighub_features_explain" appeared; new tool "bighub_features_export" appeared; new tool "bighub_features_schema" appeared; new tool "bighub_features_stats" appeared; new tool "bighub_features_compute_batch" appeared; new tool "bighub_features_compare" appeared; new tool "bighub_features_export_batch" appeared; new tool "bighub_insights_advise" appeared; new tool "bighub_insights_patterns" appeared; new tool "bighub_insights_learn" appeared; new tool "bighub_insights_profile" appeared; new tool "bighub_simulations_list" appeared; new tool "bighub_simulations_get" appeared; new tool "bighub_simulations_by_request" appeared; new tool "bighub_simulations_compare" appeared; new tool "bighub_simulations_accuracy" appeared; new tool "bighub_simulations_stats" appeared; new tool "bighub_learning_strategy" appeared; new tool "bighub_learning_runs" appeared; new tool "bighub_learning_recompute" appeared; new tool "bighub_learning_backfill" appeared; new tool "bighub_actions_evaluate_batch" appeared; new tool "bighub_ingest_event" touches a sensitive surface (email/exec/net/fs); new tool "bighub_ingest_batch" appeared; new tool "bighub_ingest_reconcile" appeared; new tool "bighub_ingest_lifecycles" appeared; new tool "bighub_ingest_lifecycle" touches a sensitive surface (email/exec/net/fs); new tool "bighub_ingest_pending" appeared; new tool "bighub_ingest_stale" appeared; new tool "bighub_ingest_stats" appeared; new tool "bighub_ingest_adapters" appeared.

• Transport config

  unscannable10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  local stdio server: no remote transport or auth surface, and no phone-home/telemetry signal found in source. Absence of transport findings is NOT a safety guarantee — phone-home hosts can be constructed at runtime and defeat static analysis.