Is mcp-ticketer@2.3.19 safe to install?

mcp-ticketer@2.3.19

VERIFIED· not started

Publisher claims: "Universal ticket management interface for AI agents with MCP support" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry PyPI (MCP server)Publisher mcp-ticketer · publishing for 416 daysInstalls 1,960Last detonated 4d ago

$claude mcp add mcp-ticketer -- uvx mcp-ticketer

Watch Report an issue

Coverage

Not started: dependency install failed; the server itself was not observed.

Tested: install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · the dependency install step · every file read, file written and host contacted by what ran
Not tested: server startup · the tool list · tool behavior

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

It will ask for: GITHUB_TOKENJIRA_ACCESS_TOKENJIRA_API_TOKENLINEAR_API_KEYMCP_TICKETER_API_KEYMCP_TICKETER_GITHUB_TOKENMCP_TICKETER_JIRA_TOKENMCP_TICKETER_LINEAR_API_KEY or --github-tokenConfiguration, not credentials: FORMULA_PATH, GITHUB_OWNER, GITHUB_REPO, GITHUB_REPO_URL, JIRA_ACCESS_USER, JIRA_EMAIL, JIRA_PROJECT_KEY, JIRA_SERVER, LINEAR_TEAM_ID, LINEAR_TEAM_KEY, MCP_TICKETER_ADAPTER, MCP_TICKETER_AITRACKDOWN_BASE_PATH, MCP_TICKETER_GITHUB_OWNER, MCP_TICKETER_GITHUB_REPO, MCP_TICKETER_HYBRID_ADAPTERS, MCP_TICKETER_HYBRID_MODE, MCP_TICKETER_JIRA_EMAIL, MCP_TICKETER_JIRA_SERVER, MCP_TICKETER_LINEAR_TEAM_ID, MCP_TICKETER_LINEAR_TEAM_KEY
Where it talks to: no vendor host named in the codeAlso atlassian.net, linear.app, atlassian.com, 1password.com, claude.ai, asana.com, company.com — not the publisher's domain; check what for before connecting.
What the honeypot saw: no credential files read · no network
What we could not test: server startup · the tool list · tool behavior

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names atlassian.net, linear.app, atlassian.com, 1password.com, claude.ai, asana.com, company.com as well as its own vendor. The guard injects GITHUB_TOKEN, JIRA_ACCESS_TOKEN, JIRA_API_TOKEN, LINEAR_API_KEY, MCP_TICKETER_API_KEY, MCP_TICKETER_GITHUB_TOKEN, MCP_TICKETER_JIRA_TOKEN, MCP_TICKETER_LINEAR_API_KEY only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- uvx mcp-ticketer

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (3 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-10 and scored it 82/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 3 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessexec /usr/bin/cut

0.0sprocessexited 1:

0.1sprocessexited 1: ModuleNotFoundError: No module named 'setuptools'

0.2sprocessdependency install exit 1 ·

0.2sclaimednot started: dependency install failed (exit 1); the server itself was not observed

0.2sprocessscript backend runs setup only

0.2sprocesssecond launch, clock +45 days, CI unset

0.3sprocessexec /usr/bin/cut

0.3sprocessexited 1:

0.3sprocessexited 1: ModuleNotFoundError: No module named 'setuptools'

Static findings

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/discover.py:148 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"[dim]Make sure your .env file contains adapter credentials[/dim]"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/test_set_command.sh:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .env.localFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/mcp_server.sh:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filessource .env.localFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/discover.py:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesapp = typer.Typer(help="Auto-discover configuration from .env files")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/discover.py:192 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"[dim]Make sure your .env file contains adapter credentials[/dim]"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/discover.py:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconsole.print("[yellow]No .env files found[/yellow]")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/discover.py:1 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""CLI command for auto-discovering configuration from .env files."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/mcp_server.sh:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load .env.local if it existsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/mcp_server.sh:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesif [ -f ".env.local" ]; thenFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/mcp_configure.py:328 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Load environment variables from .env file.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/mcp_configure.py:567 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load environment variables from .env.local if it exists (as override)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/project_config.py:611 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Get auto-discovered configuration from .env files.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_loader.py:138 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesself.project_root / ".env.local",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/init_command.py:471 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# First try our improved .env configuration loaderFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/ticket_commands.py:124 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_files = [".env.local", ".env"]Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_discovery.py:155 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/manager.py:148 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesf"Added {len(env_vars)} environment variables from .env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/manager.py:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path.cwd() / ".env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/main.py:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load environment variables from .env filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/mcp/server/main.py:1046 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path.cwd() / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_discovery.py:115 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfound_in: str = ".env" # Which file it was found inFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/init_command.py:468 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"[cyan]🔍 Auto-discovering configuration from .env files...[/cyan]"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/mcp_configure.py:331 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path: Path to .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/init_command.py:483 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconsole.print("\n[dim]Configuration found in: .env files[/dim]")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/project_config.py:521 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenable_env_discovery: Enable auto-discovery from .env files (default: True)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/init_command.py:776 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesIt auto-detects adapter configuration from .env files or prompts forFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/mcp/server/main.py:1057 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# No .env file found in project directory - this is okayFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/main.py:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = Path.cwd() / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/linear_commands.py:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconsole.print("Set it in .env.local or environment variables")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/project_config.py:639 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files4. Auto-discovered .env filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/project_config.py:507 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files4. Auto-discovered .env filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/worker.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load environment variables from .env.localFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/init_command.py:5 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- Auto-discovery of adapter configuration from .env filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_loader.py:136 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Load environment variables from .env files."""Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/mcp/server/main.py:1044 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# We explicitly avoid upward directory search to prevent loading .env files from parent projectsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_discovery.py:154 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env.local",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/manager.py:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Explicitly load environment variables from .env.local if it existsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_loader.py:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesself.project_root / ".env",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/ticket_commands.py:123 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Check .env.local first, then .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_discovery.py:1 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Auto-discovery of configuration from .env and .env.local files.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/main.py:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# which could load .env files from unrelated parent projectsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/env_loader.py:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files2. Loads from multiple sources (.env.local, .env, environment variables)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/ticket_commands.py:112 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"""Discover adapter configuration from .env or .env.local files.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/mcp/server/main.py:1045 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_local_file = Path.cwd() / ".env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/utils.py:179 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files2. Environment discovery (environment variables and .env files in cwd)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/main.py:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Priority: .env.local (highest) > .env (base)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/worker.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_path = Path.cwd() / ".env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/mcp_configure.py:572 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Add relevant adapter-specific vars from .env.local (overrides config.json)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/cli/mcp_configure.py:569 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file_path = Path(project_path) / ".env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/core/project_config.py:679 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 2. Apply auto-discovered .env config (if enabled)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/mcp/server/main.py:1043 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# This ensures we load .env files from the target project directory, not from where the command is executedFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/configure.py:1084 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedscripts/manage_version.py:242 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/diagnostics.py:479 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/core/env_discovery.py:592 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/configure.py:1128 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedscripts/manage_version.py:282 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/mcp_configure.py:693 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/github_commands.py:396 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/mcp_configure.py:56 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/queue/manager.py:152 · Python subprocess execution detectedprocess = subprocess.Popen(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/github_commands.py:34 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Process kill commandsrc/mcp_ticketer/queue/manager.py:234 · Process kill command — agent can terminate processes# Force kill if still aliveFix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/worker.py:390 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesenv_file = project_path / ".env.local"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp_ticketer/queue/worker.py:388 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# Load environment variables from project directory's .env.local if it existsFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Python subprocess execution detectedscripts/manage_version.py:352 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedscripts/manage_version.py:263 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

npx invocation of non-well-known packagesrc/mcp_ticketer/cli/setup_command.py:928 · npx invocation of non-well-known package — may execute untrusted code# Check if it's the official GitHub MCP server (uses npx or server-github)Fix: Pin versions and sources; vendor anything fetched at install time.

AST06

MEDIUM

Python subprocess execution detectedscripts/manage_version.py:360 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

MEDIUM

Python subprocess execution detectedsrc/mcp_ticketer/cli/mcp_configure.py:216 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.

AST05

Cost to the agent

Instructions loaded

≈54 tok

1 file · 81 in bundle

Tool list per prompt

≈0 tok

0 tools · 0 per tool

Handshake

no reply

launch to tools/list, stdio

Undocumented tools

description under 20 chars · avg 0

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for mcp-ticketer@2.3.19 as of 4d ago. This is the package itself, not its dependencies.