← All scanned servers

Trust Card · Static snapshot

stripe__agent-toolkit D

40/100 · 10 findings (0 critical) · scope excessive · Ranked #45 of 53 scanned.

Scanned 2026-09-09 · engine v0.1.0 (8 regex rules, OWASP-mapped) · upstream stripe/agent-toolkit @ 12f4881 (2026-09-09)

Score breakdown

Score constrained by 0 critical and 6 high-severity findings.

Fix first (6 critical/high)

Severity	Rule	Finding	Remediation
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-embedded-checkout/environment/app/(dashboard)/dashboard/general/page.tsx:14 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-embedded-checkout/environment/app/(dashboard)/dashboard/page.tsx:28 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-embedded-checkout/environment/app/(dashboard)/layout.tsx:19 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-partial-payments/environment/app/(dashboard)/dashboard/general/page.tsx:14 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-partial-payments/environment/app/(dashboard)/dashboard/page.tsx:28 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
HIGH	AT-SEC-006 (LLM06)	Unfiltered SSRF / Arbitrary Network Egress benchmarks/saas-starter-partial-payments/environment/app/(dashboard)/layout.tsx:19 Evidence: const fetcher = (url: string) => fetch(url).then((res) => res.json());	Define an explicit egress domain allowlist and block private IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254).
MEDIUM	AT-SEC-007 (LLM02)	Raw Secret Leakage in Debug Logging benchmarks/furever/environment/app/components/EditAccountButton.tsx:74 Evidence: console.log('response ok', newEmail, newPassword);	Implement PII/secret redaction masks before writing to log streams.
MEDIUM	AT-SEC-007 (LLM02)	Raw Secret Leakage in Debug Logging llm/ai-sdk/meter/examples/anthropic.ts:133 Evidence: console.log('\n=== Sample 6: Stream with Max Tokens ===');	Implement PII/secret redaction masks before writing to log streams.
MEDIUM	AT-SEC-007 (LLM02)	Raw Secret Leakage in Debug Logging llm/ai-sdk/meter/examples/openai.ts:98 Evidence: console.log('\n=== Sample 5: With Max Tokens ===');	Implement PII/secret redaction masks before writing to log streams.
MEDIUM	AT-SEC-007 (LLM02)	Raw Secret Leakage in Debug Logging llm/ai-sdk/provider/examples/openai.ts:51 Evidence: console.log(`Customer ID: ${process.env.STRIPE_CUSTOMER_ID}\n`);	Implement PII/secret redaction masks before writing to log streams.

Permissions

Scope: excessive · Shell: enabled · Network egress: yes · File deletion: none · Human approval: none

Provenance

License: MIT · Lockfile: no · Security policy: yes · Signals: unverified origin