registry / ellmos-servercommander-mcp / 0.1.0-alpha.11

ellmos-servercommander-mcp@0.1.0-alpha.11

Alpha MCP server for server operations: deploy dry-runs, mail status, log analysis, and health checks.

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 6 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVars

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.20 KB of source

Source & flagged code

4 flagged

config/servercommander.example.tomlView file

Lines 1-50text

1# ellmos-servercommander-mcp configuration

2# Copy to ~/.servercommander/config.toml and adjust.

4[server]

5name = "ellmos-servercommander"

6# Tool metadata language: en, de, es, zh, ja, ru

7language = "en"

9# --- Deploy profiles ---

10[deploy]

11# Keeps deployment execution disabled, but can persist dry-run plans locally.

12persist_history = false

13history_db = "~/.servercommander/deploy_history.db"

15[deploy.profiles.example_site]

16host = "sftp.example.com"

17user = "deploy-user"

18remote_path = "/var/www/example"

19local_path = "./dist"

20protocol = "sftp"

21# password = "$SFTP_PASSWORD" # Use environment variables for secrets.

Medium

Secret Pattern

Package contains a possible secret pattern.

config/servercommander.example.tomlView on unpkg · L21

23# [deploy.profiles.other]

24# host = "..."

26# --- Mail ---

27[mail]

28# IMAP is required for list/read/search readiness; SMTP is required for send readiness.

29# The alpha server reports readiness only and does not open mail connections yet.

30imap_host = "imap.example.com"

31imap_port = 993

32smtp_host = "smtp.example.com"

33smtp_port = 587

34username = "$MAIL_USER"

35password = "$MAIL_PASSWORD"

Medium

Secret Pattern

Hardcoded password in config/servercommander.example.toml

config/servercommander.example.tomlView on unpkg · L35

36cache_db = "~/.servercommander/mail_cache.db"

38# --- Log analysis ---

39[logs]

40default_format = "apache" # apache | nginx

41persist_reports = false

42reports_dir = "~/.servercommander/log_reports"

44# --- Health checks ---

45[health]

46timeout = 5

47endpoints = [

48 "https://example.com/health",

49]

src/servercommander/mail.pyView file

•path = src/servercommander/mail.py kind = build_helper sizeBytes = 4133 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/servercommander/mail.pyView on unpkg

KONZEPT.mdView file

Lines 51-91markdown

52## Konfigurationsbeispiel

54```toml

55[server]

56name = "ellmos-servercommander"

58[deploy.profiles.example_site]

59host = "sftp.example.com"

60user = "deploy-user"

61remote_path = "/var/www/example"

62local_path = "./dist"

63protocol = "sftp"

Source & flagged code

4 flagged · loading source

config/servercommander.example.tomlView file

21patternName = generic_password severity = medium line = 21 matchedText = # passwo...ets.

Medium

Secret Pattern

Package contains a possible secret pattern.

config/servercommander.example.tomlView on unpkg · L21

35patternName = generic_password severity = medium line = 35 matchedText = password...ORD"

Medium

Secret Pattern

Hardcoded password in config/servercommander.example.toml

config/servercommander.example.tomlView on unpkg · L35

src/servercommander/mail.pyView file

•path = src/servercommander/mail.py kind = build_helper sizeBytes = 4133 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/servercommander/mail.pyView on unpkg

KONZEPT.mdView file

71patternName = generic_password severity = medium line = 71 matchedText = password...ORD"

Medium

Secret Pattern

Hardcoded password in KONZEPT.md

KONZEPT.mdView on unpkg · L71

Findings

5 Medium1 Low

MediumSecret Patternconfig/servercommander.example.toml

MediumEnvironment Vars

MediumShips Build Helpersrc/servercommander/mail.py

MediumSecret Patternconfig/servercommander.example.toml

MediumSecret PatternKONZEPT.md

LowScripts Present

Source & flagged code

4 flagged

config/servercommander.example.tomlView file

Lines 1-50text

1# ellmos-servercommander-mcp configuration

2# Copy to ~/.servercommander/config.toml and adjust.

4[server]

5name = "ellmos-servercommander"

6# Tool metadata language: en, de, es, zh, ja, ru

7language = "en"

9# --- Deploy profiles ---

10[deploy]

11# Keeps deployment execution disabled, but can persist dry-run plans locally.

12persist_history = false

13history_db = "~/.servercommander/deploy_history.db"

15[deploy.profiles.example_site]

16host = "sftp.example.com"

17user = "deploy-user"

18remote_path = "/var/www/example"

19local_path = "./dist"

20protocol = "sftp"

21# password = "$SFTP_PASSWORD" # Use environment variables for secrets.

Medium

Secret Pattern

Package contains a possible secret pattern.

config/servercommander.example.tomlView on unpkg · L21

23# [deploy.profiles.other]

24# host = "..."

26# --- Mail ---

27[mail]

28# IMAP is required for list/read/search readiness; SMTP is required for send readiness.

29# The alpha server reports readiness only and does not open mail connections yet.

30imap_host = "imap.example.com"

31imap_port = 993

32smtp_host = "smtp.example.com"

33smtp_port = 587

34username = "$MAIL_USER"

35password = "$MAIL_PASSWORD"

Medium

Secret Pattern

Hardcoded password in config/servercommander.example.toml

config/servercommander.example.tomlView on unpkg · L35

36cache_db = "~/.servercommander/mail_cache.db"

38# --- Log analysis ---

39[logs]

40default_format = "apache" # apache | nginx

41persist_reports = false

42reports_dir = "~/.servercommander/log_reports"

44# --- Health checks ---

45[health]

46timeout = 5

47endpoints = [

48 "https://example.com/health",

49]

src/servercommander/mail.pyView file

•path = src/servercommander/mail.py kind = build_helper sizeBytes = 4133 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/servercommander/mail.pyView on unpkg

KONZEPT.mdView file

Lines 51-91markdown

52## Konfigurationsbeispiel

54```toml

55[server]

56name = "ellmos-servercommander"

58[deploy.profiles.example_site]

59host = "sftp.example.com"

60user = "deploy-user"

61remote_path = "/var/www/example"

62local_path = "./dist"

63protocol = "sftp"