MCPSafe.io

Security pre-install checks for MCP servers.

Mostly safe — a couple of notes worth reading.

github · XHS-DownloaderHEAD

Scanned 5/3/2026, 6:31:51 PM·Cached result·Fast Scan·45 rules·How we decide ↗

AIVSS Score

3.4/ 10

Low

Severity Breakdown

critical

high

medium

low

MCP Server Information

PackageXHS-Downloader

VersionHEAD

SourceGITHUB

LicenseGPL-3.0

PublisherJoeanAmier

Package age2y 8m

Stars11.0K

Downloads/wk—

Dependencies0

Homepagehttps://discord.com/invite/ZYtmgKud9Y

Repositoryhttps://github.com/JoeanAmier/XHS-Downloader

Findings

Showing 1–30 of 33 findings

high (2)

medium (28)

«‹

33 findings

high (2)

AIVSS 3.4CVSS 5.8

TLS certificate verification is disabled on an outbound HTTP client. Any MITM in the network path can intercept and modify requests / responses — credentials, tokens, and tool output flow over a channel with no integrity guarantee. Python requests / httpx: drop `verify=False`. If the peer is using a private CA, set `verify="/path/to/ca-bundle.pem"` or configure the system trust store. Node TS axios / fetch: drop `rejectUnauthorized: false` from the agent / `httpsAgent` options. Same private-CA

Evidence

headers: dict,
        **kwargs,
    ):
        return await self.client.get(
            url,
            headers=headers,
            **kwargs,
        )

    async def __request_url_get_proxy(
        self,
        url: str,
        headers: dict,
        proxy: str,
        **kwargs,
    ):
        return get(
            url,
            headers=headers,
            proxy=proxy,
            follow_redirects=True,
            verify=False,
            timeout=self.timeout,
            **kwar

Remediation

Drop the verify-disable flag. If the peer presents a private CA: - Python: pass `verify="/path/to/ca.pem"` or trust the system store - Node: `new https.Agent({ ca: fs.readFileSync("ca.pem") })` - Go: load the CA via `x509.NewCertPool().AppendCertsFromPEM(...)` and set `tls.Config.RootCAs` Self-signed certificates: import the cert into the OS trust chain rather than disabling verification per-call.

113	headers: dict,
114	**kwargs,
115	):
116	return await self.client.get(
117	url,
118	headers=headers,
119	**kwargs,
120	)
121
122	async def __request_url_get_proxy(
123	self,
124	url: str,
125	headers: dict,
126	proxy: str,
127	**kwargs,
128	):
129	return get(
130	url,
131	headers=headers,
132	proxy=proxy,
133	follow_redirects=True,
134	verify=False,
135	timeout=self.timeout,
136	**kwar

84	headers: dict,
85	**kwargs,
86	):
87	return await self.client.head(
88	url,
89	headers=headers,
90	**kwargs,
91	)
92
93	async def __request_url_head_proxy(
94	self,
95	url: str,
96	headers: dict,
97	proxy: str,
98	**kwargs,
99	):
100	return await self.client.head(
101	url,
102	headers=headers,
103	proxy=proxy,
104	follow_redirects=True,
105	verify=False,
106	timeout=self.timeou

758	async def run_mcp_server(
759	self,
760	transport="streamable-http",
761	host="0.0.0.0",
762	port=5556,
763	log_level="INFO",
764	):

973	async def _run_script_server(
974	self,
975	host="0.0.0.0",
976	port=5558,
977	):
978	async with ScriptServer(self, host, port):

941	def init_script_server(
942	self,
943	host="0.0.0.0",
944	port=5558,
945	):
946	if self.manager.script_server:

949	async def switch_script_server(
950	self,
951	host="0.0.0.0",
952	port=5558,
953	switch: bool = None,
954	):

15	async def api_server(
16	host="0.0.0.0",
17	port=5556,
18	log_level="info",
19	):

11	def __init__(
12	self,
13	core: "XHS",
14	host="0.0.0.0",
15	port=5558,
16	):
17	self.core = core

684	async def run_api_server(
685	self,
686	host="0.0.0.0",
687	port=5556,
688	log_level="info",
689	):

29	async def mcp_server(
30	transport="streamable-http",
31	host="0.0.0.0",
32	port=5556,
33	log_level="INFO",
34	):

965	def run_script_server(
966	self,
967	host="0.0.0.0",
968	port=5558,
969	):
970	if not self.script:

2	class ExtractParams(BaseModel):
3	url: str
4	download: bool = False
5	index: list[str \| int] \| None = None
6	cookie: str = None

1	# ---- 阶段 1: 构建器 (Builder) ----
2	# 使用一个功能完整的镜像，它包含编译工具或可以轻松安装它们
3	FROM python:3.12-bullseye as builder
4
5	# 安装编译 uvloop 和 httptools 所需的系统依赖 (C编译器等)
6	RUN apt-get update && apt-get install -y --no-install-recommends \
7	build-essential \
8	&& rm -rf /var/lib/apt/lists/*
9
10	# 设置工作目录
11	WORKDIR /app
12
13	# 复制需求文件
14	COPY requirements.txt .
15
16	# 在这个具备编译环境的阶段安装所有 Python 依赖
17	# 安装到一个独立的目录 /install 中，以便后续复制
18	RUN pip install --no-cache-dir --prefix="/install" -r requirements.txt
19
20	# ---- 阶段 2: 最终镜像 (Final Image) ----
21	# 使用轻量

83	password: ${{ secrets.GITHUB_TOKEN }}
84
85	- name: 构建和推送 Docker 镜像到 Docker Hub 和 GHCR
86	uses: docker/build-push-action@v6
87	with:
88	context: .
89	platforms: linux/amd64,linux/arm64,linux/arm/v7

40	pyinstaller --icon=./static/XHS-Downloader.icns --add-data "static:static" --add-data "locale:locale" --collect-all fastmcp --collect-all rich --runtime-hook ./source/expansion/pyi_rth_beartype.py main.py
41
42	- name: 上传文件
43	uses: actions/upload-artifact@v4
44	with:
45	name: XHS-Downloader_${{ runner.os }}_${{ runner.arch }}_${{ env.DATE }}
46	path: dist/main/

13	steps:
14	- name: 签出存储库
15	uses: actions/checkout@v4
16
17	- name: 设置 Python
18	uses: actions/setup-python@v5

12	stale:
13	runs-on: ubuntu-latest
14	steps:
15	- uses: actions/stale@v9
16	with:
17	stale-issue-message: \|
18	⚠️ 此 Issue 已超过一定时间未活动，如果没有进一步更新，将在 14 天后关闭。

48	shell: bash
49
50	- name: 上传文件到 release
51	uses: softprops/action-gh-release@v2
52	with:
53	files: \|
54	./XHS-Downloader_V*.zip

32	uses: docker/setup-buildx-action@v3
33
34	- name: 登录到 Docker Hub
35	uses: docker/login-action@v3
36	with:
37	username: ${{ secrets.DOCKERHUB_USERNAME }}
38	password: ${{ secrets.DOCKERHUB_TOKEN }}

52	echo "LATEST_TAG=$LATEST_TAG" >> $GITHUB_ENV
53
54	- name: 设置 QEMU
55	uses: docker/setup-qemu-action@v3
56
57	- name: 设置 Docker Buildx
58	uses: docker/setup-buildx-action@v3

26	fetch-depth: 1
27
28	- name: 设置 QEMU
29	uses: docker/setup-qemu-action@v3
30
31	- name: 设置 Docker Buildx
32	uses: docker/setup-buildx-action@v3

21	steps:
22	- name: 拉取源码
23	uses: actions/checkout@v4
24	with:
25	fetch-depth: 1

70	echo "TAGS=$TAGS" >> $GITHUB_ENV
71
72	- name: 登录到 Docker Hub
73	uses: docker/login-action@v3
74	with:
75	username: ${{ secrets.DOCKERHUB_USERNAME }}
76	password: ${{ secrets.DOCKERHUB_TOKEN }}

11	runs-on: ubuntu-latest
12	steps:
13	- name: Delete all containers from package without tags
14	uses: Chizkiyahu/delete-untagged-ghcr-action@v6
15	with:
16	token: ${{ secrets.PAT_TOKEN }}
17	repository_owner: ${{ github.repository_owner }}

github · XHS-DownloaderHEAD

high (2)

medium (28)

high (2)

medium (31)

LLM summary— XHS-Downloader:HEAD

Signal scores

LLM judge panel

CVE check

Community trust

Scan details

Tool heatmap

MCP Server Information

Run this exact engine on your private repo — before users see it on /scan.

high (2)

medium (28)

high (2)

medium (31)

Tool heatmap

Severity breakdown

76	password: ${{ secrets.DOCKERHUB_TOKEN }}
77
78	- name: 登录到 GitHub Container Registry
79	uses: docker/login-action@v3
80	with:
81	registry: ${{ env.REGISTRY }}
82	username: ${{ github.actor }}