Is Arbuilder safe to use?

Arbuilder is rated NOT_RECOMMENDED by SpiderRating. Arbuilder is not recommended — low score (1.85/10) with 6 critical issues.

What are the security risks of Arbuilder?

Key risk flags: metadata_secret_leak (critical), token_leakage (high), hardcoded_credential (high). Overall security score: 5.1/10 with 6 critical issues.

Are there safer alternatives to Arbuilder?

Similar tools include: cyclimse/mcp-scaleway-functions, karad/seiro-mcp, hackerzhuli/unity_code_mcp. View full comparison at spiderrating.com.

Arbuilder

Quantum3-Labs/ARBuilderMIT⭐ 16🔧 47 tools

F1.9SpiderScore (registry)

Use cases:build-test code-execution iac-deploy

⚠ Hard constraint applied: critical vulnerability

Decision

Not Recommended

Confidence

90%

Arbuilder is not recommended — low score (1.85/10) with 6 critical issues.

Recommended Actions

high
Run In Container
6 critical vulnerabilities require isolation
high
Limit Permissions
Restrict tool access to minimum required scope

Do Not

✗running in production without container isolation
✗exposing this tool to untrusted input
✗using for security-sensitive tasks

Risk Flags (6)

critical
metadata_secret_leak×5
Hardcoded secret or API key found in source code
high
token_leakage
Secret or token may be leaked through error messages, logs, or return values
high
hardcoded_credential×3
Hardcoded credential -- secret value embedded in source code
high
ts_path_traversal×2
Potential path traversal -- user input used in file system operations
high
prototype_pollution×6
Potential prototype pollution -- user-controlled keys may modify Object.prototype
medium
timing_attack_comparison×3
Secret compared with == operator -- timing side-channel may leak value length

How This Was Decided

negativew=0.5Overall quality score = 1.85/10 (grade F)
negativew=0.86 critical security issue(s) detected
negativew=0.513 high-severity issue(s) detected
negativew=0.3Tool description clarity score = 1.7/10

Source: SpiderRating automated security scanUpdated: 2026-03-21Protocol: v1.1

Description Quality

Composite: 1.7 / 10

3-Layer Breakdown

Description (38%)

1.7

Security (34%)

5.1

Metadata (28%)

6.9

Description Dimensions

Intent Clarity

1.7

Permission Scope

0.0

Side Effects

2.2

Capability Disclosure

3.1

Operational Boundaries

1.8

Security Analysis

5.1

Score

Critical

High

Medium

Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

13 HIGH6 CRITICAL3 MEDIUM

Metadata Health

Provenance (40%)

8.0

Maintenance (35%)

8.0

Popularity (25%)

3.6

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/Quantum3-Labs__ARBuilder.svg)](https://spiderrating.com/servers/Quantum3-Labs/ARBuilder)

🛡️

Protect Your Agents

Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.

Get Free API Key →

📊

Monitor All Your Servers

Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.

Start Free Trial →

⭐

Scan Locally (Open Source)

Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.

Star on GitHub →

3.9D

Seiro Mcpkarad/seiro-mcp

3.8D

Unity Code Mcphackerzhuli/unity_code_mcp