Trust Card · Static snapshot

Flux159__mcp-server-kubernetes C

61/100 · 2 findings (0 critical) · scope excessive · Ranked #33 of 53 scanned.

Scanned 2026-09-09 · engine v0.1.0 (8 regex rules, OWASP-mapped) · upstream Flux159/mcp-server-kubernetes @ daf01de (2026-08-31)

Score breakdown

security 70

permissions 20

provenance 75

reliability 85

stability 75

Score constrained by 0 critical and 2 high-severity findings.

Fix first (2 critical/high)

Severity	Rule	Finding	Remediation
HIGH	`AT-SEC-005` (ASI02)	Unrestricted Recursive File Deletion / Modification `src/utils/kubernetes-manager.ts:377` Evidence: `fs.unlinkSync(tempKubeconfigPath);`	Enforce strict jail/root directories and require explicit human-in-the-loop confirmation before file deletions.
HIGH	`AT-SEC-006` (LLM06)	Unfiltered SSRF / Arbitrary Network Egress `tests/streaming_http.test.ts:83` Evidence: `const postResponse = await fetch(url, {`	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).

Permissions

Scope: excessive · Shell: enabled · Network egress: yes · File deletion: enabled · Human approval: none

Provenance

License: MIT · Lockfile: no · Security policy: yes · Signals: unverified origin

Independently scanned by the AgentTrust registry (not self-reported by the project). Static analysis only — no code executed, findings need human triage, counts may include test/example code. Static snapshot; re-scan before relying on it: npx @eulogik/agenttrust scan https://github.com/Flux159/mcp-server-kubernetes. Scores move with every upstream commit; pages refresh weekly. How scoring works.