Skills/Glama/universal-tplink-mcp

universal-tplink-mcp@1.0.0

CAUTION· not started

Publisher claims: "Enables AI assistants and terminal users to inspect and administer TP-Link routers through typed MCP tools, including live LTE signal and cell/band control, connected clients and DHCP reservations, Wi-Fi and LED settings, diagnostics, SMS/USSD, and guarded disruptive actions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry GlamaPublisher dulithdivisekara · publishing for 2 daysInstalls 0Last detonated 46 h ago
What would fix thisWatchDispute verdict

Coverage

Not started: dependency install failed; the server itself was not observed.
Tested
the dependency install step · every file read, file written and host contacted by what ran
Not tested
server startup · the tool list · tool behavior

What this means for the label: Caution here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for
TPLINK_PASSWORD or --guest-passwordConfiguration, not credentials: DEV, INK_SCREEN_READER, PYTHONPATH, TERM_PROGRAM, TMUX, TPLINK_COOKIE, TPLINK_ENV, TPLINK_EXPECTED_SSID, TPLINK_NO_ANIM, TPLINK_ROUTER_IP, TPLINK_SESSION_COOKIE, TPLINK_USERNAME, WS_NO_BUFFER_UTIL, WS_NO_UTF_8_VALIDATE
Where it talks to
no vendor host named in the codeAlso dulith.me, gstatic.com, tailwindcss.com, react.dev — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names dulith.me, gstatic.com, tailwindcss.com, react.dev as well as its own vendor. The guard injects TPLINK_PASSWORD only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- <the server's command>

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-12 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; URL with embedded credentials; Privileged sudo command. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.1sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathstplink_router/core/config.py:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Reads simple KEY=VALUE pairs from an .env file."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
URL with embedded credentialstplink_router/calibration/dashboard.py:33 · URL with embedded credentials — may be phishing or credential leaking<link href="https://fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700&family=Plus+Jakarta+Sans:wght@400;500;600;700;800&display=swap" rel="stylesheet">Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST07
HIGH
Privileged sudo commandscripts/optimize-network.sh:129 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo $0 disable"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandtplink_router/calibration/agy_agent.py:161 · Privileged sudo command — agent may execute with elevated privileges"sudo ./scripts/optimize-network.sh enable"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandtplink_router/calibration/agy_agent.py:144 · Privileged sudo command — agent may execute with elevated privilegesf"3. **Enable Linux TCP BBR**: `sudo ./scripts/optimize-network.sh enable` for bufferbloat mitigation.",Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/build-apt-repo.py:8 · Privileged sudo command — agent may execute with elevated privilegessudo apt install tplink-cliFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/optimize-network.sh:6 · Privileged sudo command — agent may execute with elevated privileges# sudo ./optimize-network.sh enable # Apply LTE-optimized kernel & MTU parametersFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Privileged sudo commandscripts/optimize-network.sh:7 · Privileged sudo command — agent may execute with elevated privileges# sudo ./optimize-network.sh disable # Instantly revert back to default Linux settingsFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
HIGH
Access to sensitive file pathstplink_router/core/config.py:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files3. Local project .env or $TPLINK_ENVFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathstplink_router/core/config.py:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 3. Project .env or custom env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Privileged sudo commandscripts/optimize-network.sh:26 · Privileged sudo command — agent may execute with elevated privilegesecho " sudo $0 $1"Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Process kill commandscripts/keepalive-pulse.sh:67 · Process kill command — agent can terminate processesif [ -f "$PID_FILE" ] && kill -0 "$(cat "$PID_FILE")" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File permission modification commandweb-cli/install.sh:42 · File permission modification command — agent changes file ownership/permissionschmod +x "${INSTALL_DIR}/tplink-cli"Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/cli/main.py:1002 · Python subprocess execution detectedsubprocess.run(["iw", "dev", wlan_iface, "set", "power_save", "off"], capture_output=True, text=True, check=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Unicode escape sequence detectedtplink_router/cli/ink_ui/tui.mjs:4 · Unicode escape sequence detected — may contain obfuscated payloads…=>{Bf.exports=()=>/[#*0-9]\uFE0F?\u20E3|[\xA9\xAE\u203C\u2049\u2122\u2139\u2194-\u2199\u21A9\u21AA\u231A\u231B\u2328\u23CF\u23ED-\u23EF\u23F1\u23F2\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB\u25FC\u25FE…Fix: Put hosts, commands and strings in plain source. Decoding at runtime looks identical to malware and costs points on its own.
AST07
LOW
URL to a private-network addresstests/test_calibration.py:95 · URL to a private-network address — a LAN or development targethost="http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/core/network_guard.py:31 · Python subprocess execution detectedout = subprocess.check_output(["route", "-n", "get", "default"], stderr=subprocess.DEVNULL, timeout=2).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actiontplink_router/cli/ink_ui/tui.mjs:74 · File type combined with upload action — agent may exfiltrate local data files…atch{}Qn?this.options.stdout.write(this.lastOutput+` `):this.options.debug||this.log.done()}this.kittyProtocolEnabled=!1,this.options.concurrent?Kt.updateContainer(null,this.container,null,pl):(Kt.updateContainerSync(null,this.container,nu…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
LOW
URL to a private-network addresstests/test_advanced_features.py:12 · URL to a private-network address — a LAN or development targetself.client = TPLinkMRClient("http://192.168.1.1", "secret")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actiontplink_router/cli/ink_ui/tui.mjs:68 · File type combined with upload action — agent may exfiltrate local data files…g()},this.throttledOnRender=g}this.rootNode.onImmediateRender=this.onRender,this.log=fd.create(n.stdout,{incremental:n.incrementalRendering}),this.cursorPosition=void 0,this.throttledLog=a?this.log:Du(g=>{let f=this.log.willRender(g),B=Vi(…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedscripts/rain-calibration.py:27 · Python subprocess execution detectedres = subprocess.run(cmd, capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actiontplink_router/cli/ink_ui/tui.mjs:41 · File type combined with upload action — agent may exfiltrate local data files…c function D1(){let n=(await import("node:fs")).readFileSync(new URL("../package.json",import.meta.url),"utf8");return JSON.parse(n)}var bQ=Wo()?await D1():{name:void 0,version:void 0},Kt=(0,MQ.default)({getRootHostContext:()=>({isInsideTe…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/cli/ink_ui/__init__.py:86 · Python subprocess execution detectedproc = subprocess.run(cmd, env=env)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_ink_tui.py:32 · Python subprocess execution detectedres = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addresstests/test_cli_error_handling.py:20 · URL to a private-network address — a LAN or development targetargs = argparse.Namespace(json=False, host="http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_animator.py:96 · URL to a private-network address — a LAN or development targetworker = RouterBridgeWorker(target_host="http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/core/network_guard.py:52 · Python subprocess execution detectedout = subprocess.check_output(["nmcli", "-t", "-f", "active,ssid", "dev", "wifi"], stderr=subprocess.DEVNULL, timeout=2).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addressink-src/src/index.tsx:24 · URL to a private-network address — a LAN or development targethost: 'http://192.168.1.1',Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/core/network_guard.py:36 · Python subprocess execution detectedout = subprocess.check_output(["route", "print", "0.0.0.0"], stderr=subprocess.DEVNULL, timeout=2).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/cli/main.py:994 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/sync-repos.py:31 · Python subprocess execution detectedres = subprocess.run(cmd, cwd=cwd, shell=isinstance(cmd, str), capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Process kill commandscripts/keepalive-pulse.sh:55 · Process kill command — agent can terminate processeskill "$pid" 2>/dev/null || trueFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
URL to a private-network addresstests/test_calibration.py:102 · URL to a private-network address — a LAN or development targethost="http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
File type combined with upload actiontplink_router/cli/ink_ui/tui.mjs:73 · File type combined with upload action — agent may exfiltrate local data files…tput+a),this.lastOutput=a,this.lastOutputToRender=f,this.lastOutputHeight=o,this.log.sync(f),B&&this.options.stdout.write(si);return}if(c){let B=Vi(this.options.stdout);B&&this.options.stdout.write(ji),this.log.clear(),this.options.stdout.…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
LOW
URL to a private-network addressscripts/router_calibrator.py:50 · URL to a private-network address — a LAN or development targetparser.add_argument("--host", default=os.getenv("TPLINK_ROUTER_IP", "http://192.168.1.1"), help="Router IP")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/calibration/engine.py:209 · Python subprocess execution detectedres = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout_sec)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Process kill commandscripts/keepalive-pulse.sh:54 · Process kill command — agent can terminate processesif kill -0 "$pid" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
LOW
URL to a private-network addresstests/test_calibration.py:14 · URL to a private-network address — a LAN or development targethost="http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_animator.py:100 · URL to a private-network address — a LAN or development targetself.assertEqual(ping_resp["result"]["host"], "http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
MEDIUM
Python subprocess execution detectedtplink_router/core/network_guard.py:25 · Python subprocess execution detectedout = subprocess.check_output(["ip", "route", "show", "default"], stderr=subprocess.DEVNULL, timeout=2).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Access to sensitive file pathstplink_router/core/config.py:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path(os.environ.get("TPLINK_ENV", ".env"))Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/cli/main.py:959 · Python subprocess execution detectedres = subprocess.run(["iw", "dev"], capture_output=True, text=True, check=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/cli/main.py:965 · Python subprocess execution detectedres_ps = subprocess.run(["iw", "dev", wlan_iface, "get", "power_save"], capture_output=True, text=True, check=False)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/build-apt-repo.py:63 · Python subprocess execution detectedres = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Process kill commandscripts/keepalive-pulse.sh:39 · Process kill command — agent can terminate processesif [ -f "$PID_FILE" ] && kill -0 "$(cat "$PID_FILE")" 2>/dev/null; thenFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/core/network_guard.py:60 · Python subprocess execution detectedout = subprocess.check_output(["iw", "dev"], stderr=subprocess.DEVNULL, timeout=2).decode()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtplink_router/cli/main.py:976 · Python subprocess execution detectedres_nm = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
LOW
URL to a private-network addresstests/test_network_guard.py:20 · URL to a private-network address — a LAN or development targetis_safe, msg = NetworkGuard.check_safety("http://192.168.1.1", expected_ssid="dulith.connect")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_error_handling.py:31 · URL to a private-network address — a LAN or development targetself.assertIn("http://192.168.1.1", output)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/interactive_tui.py:1577 · URL to a private-network address — a LAN or development targettarget_host: str = "http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_ink_tui.py:94 · URL to a private-network address — a LAN or development targetres = launch_best_tui(target_host="http://192.168.1.1", mono=True, prefer_python=True)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_theme.py:80 · URL to a private-network address — a LAN or development targetprint_modern_ui("http://192.168.1.1", mono=mono)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/main.py:2453 · URL to a private-network address — a LAN or development targetcommon_parser.add_argument("--host", nargs="?", const="SHOW", default=argparse.SUPPRESS, help="Router IP/Host (default: http://192.168.1.1)")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_ink_tui.py:96 · URL to a private-network address — a LAN or development targetmock_py.assert_called_once_with(target_host="http://192.168.1.1", mono=True)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_error_handling.py:62 · URL to a private-network address — a LAN or development targetcode_json = handle_cli_error(err, argparse.Namespace(json=True, host="http://192.168.1.1"))Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_factory.py:31 · URL to a private-network address — a LAN or development targetclient_mr = RouterClientFactory.get_client("http://192.168.1.1", "secret", force_family="mr")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_network_guard.py:33 · URL to a private-network address — a LAN or development targetis_safe, msg = NetworkGuard.check_safety("http://192.168.1.1", force=True)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_network_guard.py:27 · URL to a private-network address — a LAN or development targetis_safe, msg = NetworkGuard.check_safety("http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_error_handling.py:37 · URL to a private-network address — a LAN or development targetargs = argparse.Namespace(json=True, host="http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_theme.py:49 · URL to a private-network address — a LAN or development target("Gateway", "http://192.168.1.1"),Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/core/config.py:12 · URL to a private-network address — a LAN or development targetDEFAULT_HOST = "http://192.168.1.1"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/bridge.py:35 · URL to a private-network address — a LAN or development targetself.target_host: str = target_host or cfg.get("host", "http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/ink_ui/__init__.py:34 · URL to a private-network address — a LAN or development targettarget_host: str = "http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/mcp/server.py:443 · URL to a private-network address — a LAN or development targethost=cfg.get("host", "http://192.168.1.1"),Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/modern_ui.py:83 · URL to a private-network address — a LAN or development targettarget_host: str = "http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_cli_error_handling.py:55 · URL to a private-network address — a LAN or development targetcode_text = handle_cli_error(err, argparse.Namespace(json=False, host="http://192.168.1.1"))Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/main.py:781 · URL to a private-network address — a LAN or development targethost = args.host or "http://192.168.1.1"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_factory.py:27 · URL to a private-network address — a LAN or development targetfamily = RouterClientFactory.detect_model_family("http://192.168.0.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_interactive_tui.py:47 · URL to a private-network address — a LAN or development targetst = TUIState(target_host="http://192.168.1.1", runner=fake_runner)Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/interactive_tui.py:514 · URL to a private-network address — a LAN or development targettarget_host: str = "http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/main.py:2697 · URL to a private-network address — a LAN or development targettarget_host = cfg.get("host", "http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/ink_ui/tui.mjs:85 · URL to a private-network address — a LAN or development target…us OK`}:{output:"OK",changed:1}}};var Zg=tA(wt(),1);function wF(e){let n={host:"http://192.168.1.1",pythonBin:"python3",bridgeModule:"tplink_router.cli.bridge",mono:!!process.env…Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_factory.py:34 · URL to a private-network address — a LAN or development targetclient_broad = RouterClientFactory.get_client("http://192.168.0.1", "secret", force_family="broadband")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_network_guard.py:13 · URL to a private-network address — a LAN or development targetis_safe, msg = NetworkGuard.check_safety("http://192.168.1.1", expected_ssid="dulith.connect")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/main.py:2695 · URL to a private-network address — a LAN or development targettarget_host = getattr(a, "host", None) or cfg.get("host", "http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstests/test_factory.py:18 · URL to a private-network address — a LAN or development targetfamily = RouterClientFactory.detect_model_family("http://192.168.1.1")Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/calibration/engine.py:80 · URL to a private-network address — a LAN or development targethost: str = "http://192.168.1.1",Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07
LOW
URL to a private-network addresstplink_router/cli/main.py:2335 · URL to a private-network address — a LAN or development targethost = cfg.get("host") or getattr(args, "host", None) or "http://192.168.1.1"Fix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.
AST07

Cost to the agent

Instructions loaded
≈46 tok
1 file · 77 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

12 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim dulithdivisekara: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. Access to sensitive file paths≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  3. URL with embedded credentials≈ +4 on the totalStop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
  4. Privileged sudo command≈ +4 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  5. Process kill command≈ +2 on the totalBuild commands from fixed arguments; do not interpolate untrusted strings into a shell.
  6. File permission modification command≈ +2 on the totalRequest the narrowest permission that works; replace wildcards with the exact paths or hosts.
Publish a new version to Glama, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim dulithdivisekaraPropose a patch to the maintainer