Shinzo

shinzo-labs/shinzoNOASSERTION⭐ 31🔧 0 tools

F2.0SpiderScore (registry)
Use cases:git-opschat-messagingbuild-test
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%

Shinzo is not recommended — low score (2.0/10) with 5 critical issues.

Recommended Actions

  • high
    Run In Container
    5 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • ✗running in production without container isolation
  • ✗exposing this tool to untrusted input
  • ✗using for security-sensitive tasks
Risk Flags (2)
  • critical
    ts_sql_injection×5
    SQL injection — .query() called with template literal interpolation
  • high
    token_leakage×15
    Secret or token may be leaked through error messages, logs, or return values
How This Was Decided
  • negativew=0.5Overall quality score = 2.0/10 (grade F)
  • negativew=0.85 critical security issue(s) detected
  • negativew=0.529 high-severity issue(s) detected
  • positivew=0.3Tool description clarity score = 5.0/10
Source: SpiderRating automated security scanUpdated: 2026-03-22Protocol: v1.1

Description Quality

Composite: 5.0 / 10

3-Layer Breakdown

Description (38%)
5.0
Security (34%)
5.6
Metadata (28%)
6.1

Description Dimensions

Intent Clarity
5.0
Permission Scope
5.0
Side Effects
5.0
Capability Disclosure
5.0
Operational Boundaries
5.0

Security Analysis

5.6
Score
5
Critical
29
High
0
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

5 CRITICAL29 HIGH

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
3.0
Popularity (25%)
4.1

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/shinzo-labs__shinzo.svg)](https://spiderrating.com/servers/shinzo-labs/shinzo)
🛡️

Protect Your Agents

Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.

Get Free API Key →
📊

Monitor All Your Servers

Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.

Start Free Trial →
⭐

Scan Locally (Open Source)

Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.

Star on GitHub →

Similar Servers

Gitlab Mcpsgaunet/gitlab-mcp
3.8D
Askimohaiphucnguyen/askimo
2.0F
Mcp Run Pythonpydantic/mcp-run-python
2.0F
Mcpabap-ai/mcp
2.0F
Mcp Yfinance ServerAdity-star/mcp-yfinance-server
2.0F