io.github.SupplyGraphAI/daasmart

What we checked

Six static checks, weighted by risk. Every result reflects only what could be observed in the published package and repository — never intent.

• Injection surface

  warn25% of grade

  Tool descriptions/manifest scanned for instruction-injection patterns (imperatives at the model, hidden text, 'ignore previous', data-exfil URLs).

  server instructions: off-vendor URL in a description (mcp.daasmart.com); capability text should not name where data goes. server instructions: off-vendor URL in a description (www.daasmart.com); capability text should not name where data goes.

• Supply chain

  warn25% of grade

  Package provenance: namespace verification, repo linkage, maintainer count, account age, postinstall scripts, typosquat distance.

  no resolvable repository linked to the package (provenance unverifiable)

• Credential hygiene

  pass15% of grade

  How the server takes secrets (env vs plaintext config vs hardcoded); secrets appearing in tool schemas.

  No hardcoded secrets, secret-shaped tool parameters, or leaked keys found. PASS = no static red flag; static analysis cannot prove the code honors env-based secret handling at runtime.

• Permission scope

  unscannable15% of grade

  Declared tools vs. breadth (filesystem, network, exec); flags shell-exec and unbounded filesystem access.

  No source files, package.json, or pyproject were fetched; cannot infer capability scope.

• Version behavior

  warn10% of grade

  Diff of tool definitions between versions; new permissions or changed descriptions in a patch release (the postmark-mcp class).

  vs prior 1.0.0 (patch bump): tool "poi_data_shopping" description changed (wording only, no injection pattern); tool "gov_data_population" description changed (wording only, no injection pattern); tool "company_branch" description changed (wording only, no injection pattern); tool "company_certlist" description changed (wording only, no injection pattern); tool "company_can_apply_subsidy" description changed (wording only, no injection pattern); tool "enterprise_change_legal_compliance_risk" description changed (wording only, no injection pattern); tool "company_chattel_mortgage" description changed (wording only, no injection pattern); tool "poi_data_automotive" description changed (wording only, no injection pattern); tool "company_competing" description changed (wording only, no injection pattern); tool "company_equity_freeze" description changed (wording only, no injection pattern); tool "company_change_record" description changed (wording only, no injection pattern); tool "gov_data_economy" description changed (wording only, no injection pattern); tool "gov_data_transport" description changed (wording only, no injection pattern); tool "company_executed_person" description changed (wording only, no injection pattern); tool "company_executive" description changed (wording only, no injection pattern); tool "company_filing_information" description changed (wording only, no injection pattern); tool "company_financing" description changed (wording only, no injection pattern); tool "gov_data_land" description changed (wording only, no injection pattern); tool "company_import_export" description changed (wording only, no injection pattern); tool "gov_data_enterprise_change" description changed (wording only, no injection pattern); tool "company_copyright" description changed (wording only, no injection pattern); tool "company_invest" description changed (wording only, no injection pattern); tool "company_judgement" description changed (wording only, no injection pattern); tool "gov_data_enterprise_scale" description changed (wording only, no injection pattern); tool "gov_data_innovation" description changed (wording only, no injection pattern); tool "company_patent" description changed (wording only, no injection pattern); tool "company_punish" description changed (wording only, no injection pattern); tool "poi_data_transport" description changed (wording only, no injection pattern); tool "company_illegal" description changed (wording only, no injection pattern); tool "company_randomin_spection" description changed (wording only, no injection pattern); tool "company_session_announcement" description changed (wording only, no injection pattern); tool "company_supplier" description changed (wording only, no injection pattern); tool "company_tax_violation" description changed (wording only, no injection pattern); tool "gov_data_public_opinion" description changed (wording only, no injection pattern); tool "gov_data_urban_facility" description changed (wording only, no injection pattern); tool "company_licensing" description changed (wording only, no injection pattern); tool "company_web" description changed (wording only, no injection pattern); tool "company_works" description changed (wording only, no injection pattern); tool "gov_data_environment" description changed (wording only, no injection pattern); tool "poi_data_education_culture" description changed (wording only, no injection pattern); tool "gov_data_poi_amenity" description changed (wording only, no injection pattern); tool "due_diligence_report" description changed (wording only, no injection pattern); tool "poi_data_life_service" description changed (wording only, no injection pattern); tool "poi_data_medical" description changed (wording only, no injection pattern); tool "tariff_calc" description changed (wording only, no injection pattern); tool "poi_data_finance_business" description changed (wording only, no injection pattern); tool "enterprise_change_competitor_moves" description changed (wording only, no injection pattern); tool "company_shareholder" description changed (wording only, no injection pattern); tool "poi_data_public_facility" description changed (wording only, no injection pattern); tool "company_data_search" description changed (wording only, no injection pattern); tool "enterprise_change_capital_brand_innovation" description changed (wording only, no injection pattern); tool "poi_data_dining" description changed (wording only, no injection pattern); tool "company_trademark" description changed (wording only, no injection pattern); tool "park_listed_company_num" description changed (wording only, no injection pattern); tool "poi_data_lodging_scenic" description changed (wording only, no injection pattern); tool "cbd_surrounding_population" description changed (wording only, no injection pattern); tool "chain_high_tech_company_num" description changed (wording only, no injection pattern); tool "chain_tech_oriented_company_num" description changed (wording only, no injection pattern); tool "chain_a_taxpayer_company_num" description changed (wording only, no injection pattern); tool "chain_have_no_patent_company_num" description changed (wording only, no injection pattern); tool "chain_invest_company_list" description changed (wording only, no injection pattern); tool "chain_invested_company_list" description changed (wording only, no injection pattern); tool "chain_won_tender_company_list" description changed (wording only, no injection pattern); tool "park_listed_company_list" description changed (wording only, no injection pattern); tool "cbd_surrounding_amenity" description changed (wording only, no injection pattern); tool "park_have_copyright_company_num" description changed (wording only, no injection pattern); tool "chain_participated_tender_company_num" description changed (wording only, no injection pattern); tool "chain_have_no_patent_company_list" description changed (wording only, no injection pattern); tool "chain_close_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_product" description changed (wording only, no injection pattern); tool "chain_new_start_company_list" description changed (wording only, no injection pattern); tool "chain_won_tender_company_num" description changed (wording only, no injection pattern); tool "park_close_company_list" description changed (wording only, no injection pattern); tool "park_have_patent_company_list" description changed (wording only, no injection pattern); tool "company_credit_rating" description changed (wording only, no injection pattern); tool "company_engineeringanomaly" description changed (wording only, no injection pattern); tool "cbd_surrounding_consumption" description changed (wording only, no injection pattern); tool "company_equity_pledge" description changed (wording only, no injection pattern); tool "chain_company_num" description changed (wording only, no injection pattern); tool "corporate_exception_report" description changed (wording only, no injection pattern); tool "chain_specialized_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_international_coop" description changed (wording only, no injection pattern); tool "enterprise_change_domestic_policy_compliance" description changed (wording only, no injection pattern); tool "chain_tech_oriented_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_credit_debt_risk" description changed (wording only, no injection pattern); tool "enterprise_change_innovation" description changed (wording only, no injection pattern); tool "enterprise_change_employee_benefits" description changed (wording only, no injection pattern); tool "enterprise_change_key_roles" description changed (wording only, no injection pattern); tool "company_holding" description changed (wording only, no injection pattern); tool "chain_have_copyright_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_executive_sentiment" description changed (wording only, no injection pattern); tool "enterprise_change_reputation_awareness" description changed (wording only, no injection pattern); tool "enterprise_change_human_resources" description changed (wording only, no injection pattern); tool "enterprise_change_entrepreneur_image" description changed (wording only, no injection pattern); tool "enterprise_change_process_evaluation" description changed (wording only, no injection pattern); tool "enterprise_change_employee_image" description changed (wording only, no injection pattern); tool "enterprise_change_reputation_favorability" description changed (wording only, no injection pattern); tool "chain_have_copyright_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_financial_indicators" description changed (wording only, no injection pattern); tool "company_project" description changed (wording only, no injection pattern); tool "cbd_surrounding_housing" description changed (wording only, no injection pattern); tool "company_app" description changed (wording only, no injection pattern); tool "enterprise_change_employee_evaluation" description changed (wording only, no injection pattern); tool "enterprise_change_external_policy" description changed (wording only, no injection pattern); tool "chain_listed_company_num" description changed (wording only, no injection pattern); tool "chain_high_tech_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_industry_academia" description changed (wording only, no injection pattern); tool "patent_chain_classify" description changed (wording only, no injection pattern); tool "chain_a_taxpayer_company_list" description changed (wording only, no injection pattern); tool "chain_invested_company_num" description changed (wording only, no injection pattern); tool "chain_issued_tender_company_list" description changed (wording only, no injection pattern); tool "chain_year5_company_num" description changed (wording only, no injection pattern); tool "park_company_num" description changed (wording only, no injection pattern); tool "chain_listed_company_list" description changed (wording only, no injection pattern); tool "park_high_tech_company_num" description changed (wording only, no injection pattern); tool "park_have_no_patent_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_certification" description changed (wording only, no injection pattern); tool "park_have_copyright_company_list" description changed (wording only, no injection pattern); tool "park_a_taxpayer_company_num" description changed (wording only, no injection pattern); tool "park_issued_tender_company_num" description changed (wording only, no injection pattern); tool "park_year5_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_executive_change" description changed (wording only, no injection pattern); tool "enterprise_change_org_attributes" description changed (wording only, no injection pattern); tool "enterprise_change_license" description changed (wording only, no injection pattern); tool "company_salary" description changed (wording only, no injection pattern); tool "enterprise_change_violation_illegal" description changed (wording only, no injection pattern); tool "company_session" description changed (wording only, no injection pattern); tool "enterprise_change_env_responsibility" description changed (wording only, no injection pattern); tool "company_stock_violation" description changed (wording only, no injection pattern); tool "enterprise_change_international_policy_compliance" description changed (wording only, no injection pattern); tool "enterprise_change_user_brand_satisfaction" description changed (wording only, no injection pattern); tool "enterprise_change_employee_protection" description changed (wording only, no injection pattern); tool "park_discredited_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_result_evaluation" description changed (wording only, no injection pattern); tool "search_company_candidates" description changed (wording only, no injection pattern); tool "company_tenderbid" description changed (wording only, no injection pattern); tool "sg_chokepoint" description changed (wording only, no injection pattern); tool "sg_visualization" description changed (wording only, no injection pattern); tool "company_wechat" description changed (wording only, no injection pattern); tool "enterprise_change_strength_evaluation" description changed (wording only, no injection pattern); tool "tariff_classification" description changed (wording only, no injection pattern); tool "search_region_candidates" description changed (wording only, no injection pattern); tool "supply_chain_risk_prediction" description changed (wording only, no injection pattern); tool "business_surrounding_shop" description changed (wording only, no injection pattern); tool "enterprise_change_charity_responsibility" description changed (wording only, no injection pattern); tool "business_surrounding_company" description changed (wording only, no injection pattern); tool "enterprise_change_investment_financing" description changed (wording only, no injection pattern); tool "company_acquired_subsidy" description changed (wording only, no injection pattern); tool "park_specialized_company_num" description changed (wording only, no injection pattern); tool "park_tech_oriented_company_list" description changed (wording only, no injection pattern); tool "park_invested_company_list" description changed (wording only, no injection pattern); tool "park_new_start_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_project_coop" description changed (wording only, no injection pattern); tool "enterprise_change_capital_brand_recognition" description changed (wording only, no injection pattern); tool "enterprise_change_business_strategy" description changed (wording only, no injection pattern); tool "park_have_patent_company_num" description changed (wording only, no injection pattern); tool "park_have_no_patent_company_num" description changed (wording only, no injection pattern); tool "park_invest_company_num" description changed (wording only, no injection pattern); tool "park_invest_company_list" description changed (wording only, no injection pattern); tool "park_invested_company_num" description changed (wording only, no injection pattern); tool "park_participated_tender_company_num" description changed (wording only, no injection pattern); tool "park_participated_tender_company_list" description changed (wording only, no injection pattern); tool "park_won_tender_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_capital_brand_transparency" description changed (wording only, no injection pattern); tool "park_close_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_public_responsibility" description changed (wording only, no injection pattern); tool "park_specialized_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_user_brand_awareness" description changed (wording only, no injection pattern); tool "enterprise_change_international_influence" description changed (wording only, no injection pattern); tool "enterprise_change_policy_fiscal_support" description changed (wording only, no injection pattern); tool "chain_company_list" description changed (wording only, no injection pattern); tool "chain_specialized_company_list" description changed (wording only, no injection pattern); tool "chain_have_patent_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_gov_visit_exchange" description changed (wording only, no injection pattern); tool "chain_discredited_company_num" description changed (wording only, no injection pattern); tool "chain_issued_tender_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_legal_responsibility" description changed (wording only, no injection pattern); tool "chain_invest_company_num" description changed (wording only, no injection pattern); tool "chain_participated_tender_company_list" description changed (wording only, no injection pattern); tool "chain_year5_company_list" description changed (wording only, no injection pattern); tool "chain_have_patent_company_list" description changed (wording only, no injection pattern); tool "chain_discredited_company_list" description changed (wording only, no injection pattern); tool "enterprise_change_company_profile" description changed (wording only, no injection pattern); tool "chain_new_start_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_branch_setup" description changed (wording only, no injection pattern); tool "chain_close_company_num" description changed (wording only, no injection pattern); tool "park_high_tech_company_list" description changed (wording only, no injection pattern); tool "park_discredited_company_list" description changed (wording only, no injection pattern); tool "park_issued_tender_company_list" description changed (wording only, no injection pattern); tool "park_won_tender_company_list" description changed (wording only, no injection pattern); tool "park_year5_company_num" description changed (wording only, no injection pattern); tool "enterprise_change_employee_development" description changed (wording only, no injection pattern); tool "park_company_list" description changed (wording only, no injection pattern); tool "park_tech_oriented_company_num" description changed (wording only, no injection pattern); tool "park_a_taxpayer_company_list" description changed (wording only, no injection pattern); tool "park_new_start_company_num" description changed (wording only, no injection pattern); tool "company_basic_info" description changed (wording only, no injection pattern); tool "listed_company_financial_info" description changed (wording only, no injection pattern).

• Transport config

  fail10% of grade

  Remote servers: TLS and auth mode (none/token/OAuth). Local servers: whether the manifest indicates it phones home.

  remote MCP endpoint declares NO authentication (unauthenticated remote — nginx-ui/CVE-2026-33032 class)