仓库静态检查
- 检查 Commit
9493267ababc- 证据分
- 85/100
- 静态风险
- 中风险
- 扫描文件
- 6
- 检查发现
- 31
证据分项
来源溯源22/25
安装文档25/25
维护状况17/20
兼容性证据11/20
安全信号10/10
兼容性置信度: 有限
检查发现 (31)
- 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:14credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:23credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:32credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:41credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:50credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:59credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:68credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:77credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:86credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:95credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:104credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:113credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:122credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:131credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-data-mcp/cordis.patch.yml:140credential-accessAuthorization: !!js '`Bearer ${process.env.CUE_API_KEY}`' - 中
credentials.env-secretdsh/cue-omni-reader/cordis.patch.yml:22credential-accessCUE_API_KEY: !!js process.env.CUE_API_KEY - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:12networkurl: https://mcp.cuecue.cn/api/regulatory/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:21networkurl: https://mcp.cuecue.cn/api/regulatory_cn/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:30networkurl: https://mcp.cuecue.cn/api/macro/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:39networkurl: https://mcp.cuecue.cn/api/disclosure/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:48networkurl: https://mcp.cuecue.cn/api/disclosure_cn/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:57networkurl: https://mcp.cuecue.cn/api/margin/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:66networkurl: https://mcp.cuecue.cn/api/statute/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:75networkurl: https://mcp.cuecue.cn/api/institutional/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:84networkurl: https://mcp.cuecue.cn/api/entity_data/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:93networkurl: https://mcp.cuecue.cn/api/academic/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:102networkurl: https://mcp.cuecue.cn/api/fr_fact_index/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:111networkurl: https://mcp.cuecue.cn/api/ipo/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:120networkurl: https://mcp.cuecue.cn/api/esop/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:129networkurl: https://mcp.cuecue.cn/api/buyback/mcp/ - 低
network.external-hostdsh/cue-data-mcp/cordis.patch.yml:138networkurl: https://mcp.cuecue.cn/api/fr_footnote/mcp/
未执行的检查
- 依赖漏洞数据库扫描
- 实际安装测试
- 运行时行为验证
扫描器 1.0.0 · 评分器 1.0.0
