仓库静态检查
- 检查 Commit
8c6118d2097d- 证据分
- 86/100
- 静态风险
- 中风险
- 扫描文件
- 7
- 检查发现
- 7
证据分项
来源溯源25/25
安装文档25/25
维护状况17/20
兼容性证据9/20
安全信号10/10
兼容性置信度: 有限
检查发现 (7)
- 中
credentials.env-secretpackages/dsh-mcp-context7/cordis.patch.yml:13credential-accessheaders: !!js "(process.env.CONTEXT7_API_KEY ? { Authorization: 'Bearer ' + process.env.CONTEXT7_API_KEY } : {})" - 中
credentials.env-secretpackages/dsh-mcp-firecrawl/cordis.patch.yml:14credential-accessheaders: !!js "(process.env.FIRECRAWL_API_KEY ? { Authorization: 'Bearer ' + process.env.FIRECRAWL_API_KEY } : {})" - 中
credentials.env-secretpackages/dsh-tavily/cordis.patch.yml:25credential-accessheaders: !!js "(process.env.TAVILY_API_KEY ? { Authorization: 'Bearer ' + process.env.TAVILY_API_KEY } : { 'X-Tavily-Access-Mode': 'keyless' })" - 中
deps.core-package-installedpackages/dsh-tavily/package.jsondependencies"@deepseek-ai/schemastery": "^3.18.1" - 低
network.external-hostpackages/dsh-mcp-context7/cordis.patch.yml:12networkurl: https://mcp.context7.com/mcp - 低
network.external-hostpackages/dsh-mcp-firecrawl/cordis.patch.yml:13networkurl: https://mcp.firecrawl.dev/v2/mcp - 低
network.external-hostpackages/dsh-tavily/cordis.patch.yml:24networkurl: https://mcp.tavily.com/mcp/
未执行的检查
- 依赖漏洞数据库扫描
- 实际安装测试
- 运行时行为验证
扫描器 1.0.0 · 评分器 1.0.0