io.github.JinNing6/cyberhuatuo

The evidence

Every deduction below names the artefact that produced it. Nothing on this page was executed: the source was read, never run, and no running server was contacted.

Code Safety

• cyberhuatuo/case_sync.py:212mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

          req = urllib.request.Request(url, headers=headers)
          try:
              with urllib.request.urlopen(req, timeout=10) as resp:
                  # 保存新 ETag
                  new_etag = resp.headers.get("ETag")

• cyberhuatuo/case_sync.py:305mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

          req = urllib.request.Request(url, headers=headers)
          try:
              with urllib.request.urlopen(req, timeout=15) as resp:
                  data = json.loads(resp.read().decode("utf-8"))
          except Exception as e:

• cyberhuatuo/case_sync.py:376mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

              try:
                  req = urllib.request.Request(raw_url, headers=headers)
                  with urllib.request.urlopen(req, timeout=10) as resp:
                      content = resp.read()
                  with local_path.open("xb") as output:

• cyberhuatuo/config.py:145mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

  
      req = urllib.request.Request(api_url, headers=headers)
      with urllib.request.urlopen(req, timeout=30) as resp:
          tree_data = json.loads(resp.read().decode("utf-8"))
  

• cyberhuatuo/config.py:165mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

              if github_token:
                  req.add_header("Authorization", f"Bearer {github_token}")
              with urllib.request.urlopen(req, timeout=15) as resp:
                  local_path.write_bytes(resp.read())
              downloaded += 1

• cyberhuatuo/github_bot.py:47mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

  
      try:
          with urllib.request.urlopen(req, timeout=30) as resp:
              return json.loads(resp.read().decode("utf-8"))
      except urllib.error.HTTPError as e:

• cyberhuatuo/traction.py:129mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

          request_headers.update(headers)
      request = Request(url, headers=request_headers, method="GET")
      with urlopen(request, timeout=timeout) as response:  # noqa: S310
          body = response.read().decode("utf-8")
      return json.loads(body)

• cyberhuatuo/version_check.py:30mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

          req = urllib.request.Request(url, headers={"Accept": "application/json"})
          # 设置 3 秒超时，绝不阻塞启动
          with urllib.request.urlopen(req, timeout=3) as resp:
              data = json.loads(resp.read().decode("utf-8"))
  

• cyberhuatuo/version_check.py:63mcp-python-ssrf-nonliteral-url (medium/low)

  An outbound HTTP request is made to a URL that is not a literal. If any part of it is caller-supplied, the server can be steered at internal hosts — cloud metadata endpoints, admin ports, other tenants.

              url = "https://pypi.org/pypi/cyberhuatuo/json"
              req = urllib.request.Request(url, headers={"Accept": "application/json"})
              with urllib.request.urlopen(req, timeout=3) as resp:
                  data = json.loads(resp.read().decode("utf-8"))
              latest = data.get("info", {}).get("version", "")

Auth Posture

• authentication_model

  stdio transport: the client launches the server as a subprocess, so the OS process boundary is the auth boundary — `03` §4 does not penalise absent auth here

• transport_security

  declared transport: stdio — launched as a subprocess by the client, so the security boundary is the client process, not a network port (`03` §4)

• secret_handling

  Private Key at tests/test_agent_guard.py:383; …and 14 more matches

• authorization_granularity

  64 tool registrations with conditional access logic present in the same source

Maintenance

• recency

  last commit 92 day(s) before 2026-10-16

• issue_responsiveness

  every issue read was filed by the project itself (4 by its maintainers or bots), so none is someone outside waiting for an answer, and `03` §5's question — will anyone read an issue I file? — has nothing to measure.

• release_cadence

  median release gap 1 days (by releases), last release 92 day(s) ago

• bus_factor

  sole maintainer, and no commit in over 90 days

• repository_signals

  `03` §5 scores this by quartile WITHIN the server's category, which needs a distribution across every scanned server and so cannot be computed while scanning one. It is a post-pass over the crawl and that pass does not exist yet.

Transparency

• license

  LICENSE present with no SPDX-License-Identifier tag; identified as 'Apache-2.0' from its text

• readme_quality

  README.md: installation instructions (+25), configuration documented (+25), exposed tools or resources enumerated (+30), states what the server does in the first 200 words (+20)

• declared_scopes

  specific scope or access documentation is present, but `03` §7's 100 and 60 bands both compare it against scopes INFERRED from static analysis, which is not built yet. Scoring 100 on an empty inference would be a vacuous truth — 'all ∅ inferred scopes are documented'.

• changelog

  no CHANGELOG in the fetched source. `03` §7's partial credit for tagged releases carrying release notes is not applied here — that needs the forge API, which this check does not call

• security_contact

  SECURITY.md present